last executing test programs: 47.924964966s ago: executing program 1 (id=67): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES64=r3, @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x4}, 0x18) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000500)={r4, 0x1, 0xfffffffffffffff9, 0x10}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), r0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r7, 0x5421, &(0x7f0000000140)=0x1) writev(r7, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(r7) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@gettaction={0x60, 0x32, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0x14, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x4c000) 47.821696359s ago: executing program 1 (id=72): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x6, 0x9, 0x0, 0x8, 0x59008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4547, 0x0, @perf_config_ext={0x3, 0x4}, 0xa440, 0xc8, 0x2, 0x9, 0xffffffff, 0x0, 0x2}, 0x0, 0xf, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x6, 0xa}, &(0x7f0000000c80)=0x18) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000002340)={0x0, 0x2, 0x100}, &(0x7f0000002380)=0x8) r5 = socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f00000000c0)={0x0, 0xc, 0xd, 0xffffe5a7, 0xffffffbe, 0x9, 0x3, 0x6, r7}, &(0x7f0000000140)=0x20) sendmmsg$inet_sctp(r2, &(0x7f0000002780)=[{&(0x7f0000000080)=@in6={0xa, 0x4e22, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000280)="e354221fa0ff70dbb6f0530f7c9e8af8f6204897ed9449cc75ce83086f7298f70d309935181ed23a14a3da5b96cab15ca73ec90cd1e3988060767fbebfbeb9e27ea4540e0d968177f296760ddfb85ed445c527877392b8e2130f1cbcf18f5abf26f07e35faee9f096a1b8ad1ab0cf88135438a2faa769b6ef41aef7c6044ef27202b6a7437020b5b22b925", 0x8b}, {&(0x7f0000000340)="d504a5020145f08c79a7acc66756f6edc72492b614c03d96b29656407638923367fd97a5917f91491638fa2a367a76cc57860c2dd482153a44", 0x39}, {&(0x7f0000000600)="fcb2bd906753d939e4894b2eb6af8f1356263779c71fb34b10666b252dd4a647ca9aa4413cbda3dbf4b31500c6c301ccfc637421fd90c91135580ea63d933e8de48cac0e0c4ccf48153cf7d6da8fb5a821ce0b5c1447874cbdbe31ec50b3d2aa15d6d1e7371c1d23b6befb04837ea78492a736705617c455ac4c9ab2857df8a891ef9bc78a5c4c398ab5213d82cda7e1082bc0eae84c1e89922cc98ff38f7a94471ed6048d9571a1156722a62c149bb05dafa6c8f64f35170f49234dcf8f91e5c4f0f220fa5b84de60bfe5ec5667", 0xce}, {&(0x7f00000004c0)="5ccd12a9a369056f687aac6da1fae8e5b1594b0a04379f1803ed54", 0x1b}], 0x4, &(0x7f0000000540)=[@init={0x18, 0x84, 0x0, {0x1, 0xe, 0x7ff, 0x4}}, @authinfo={0x18, 0x84, 0x6, {0x6}}], 0x30, 0x4000000}, {&(0x7f0000000700)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000840)="a4e7beb4b5304a7353b9a1333fb8f6bdf17a725eae8f31415120bc282f3c2ffac1b26c277886bef998224ebbd9132203f22e67a7c9333466dee88fbf2b4986f4b25c82ff466fbeb76a3c", 0x4a}, {&(0x7f0000000740)="9ecd604344f381909cd8c8f8efceeeba", 0x10}, {&(0x7f00000008c0)="7b4501889dc8aa2d66a0d251e6f163c0fbea2f55cdb2e9526db06f592bb4911938befbf085ca4be2df6d66207fc0125b695dfe9db6906efc9bc50bd72e86f4e040b7750cf37a57259e8efe24e12dbbce2f0510a384afac037900", 0x5a}, {&(0x7f0000000940)="55676449fd5c64fb142be6ef69918ce2fb328e80b117a5d640b30a31f4b6d413f18c5ed300ae2c6367dce6a55ceb8412e48c85570e1afbad648d7a134fa83dae444d360090a0995f46ea2333306e6bc3467716f66a4f15aaa2f86e0609ce6170d56a8d1332f0abf0e1f72fd9f6", 0x6d}, {&(0x7f00000009c0)="785268f4ece9e79d45dd4506c6f7d0d114586e6ac02a1a655a9b873f18cd190a59ff3684c5b2a837bf36dd6bb54d5fed35cca2068b0f8d25d2d8966cd4e48203baefd35b474164fdbec63af778d52b608d2ef6fe88cebc01dbbe3522b5c6ab51018f21cfe1dfcafce1df926a2b2a25526b11c62d1372d46e9ec88b19be7ccad2320a7388c5491d4364d16fe9f33b4abe93b239c6d896ff3f4c390850b38a8e0dabd8350c2a058825e5fc780578fbbd5671efc10914f8357bdbce", 0xba}, {&(0x7f0000000b40)="091df6ba1ea0fa835d5ed22b5e2c1cbd6c34a760b41b163cd20bedce5fe8fef2af67229b9ab41d57acfc6671f08e8c389fd7e56fb31811df50006ef6adfca5a522d14ec53d4fb16dea4b8f565110902e5e1f2cd1db469374390986f0370083ce3e3813acf32fe90d84372f84e7c9f566eb871779a4a31d427a68d981338a970ce98c18e3f2be1c79e9bd1d571429b728fd13bf33b5b186c86ebaeabcb75e5d4633af3e83912024663098f035429d1eb274f1f4d7f6417e51e0263aba9949cf63ac3ac420cc540a219503714766c07be8ac37", 0xd2}], 0x6, &(0x7f0000000d40)=[@dstaddrv6={0x20, 0x84, 0x8, @empty}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @authinfo={0x18, 0x84, 0x6, {0x9}}, @sndrcv={0x30, 0x84, 0x1, {0x7, 0x7c, 0x200, 0x2, 0x8001, 0x7, 0x4, 0x6, r3}}], 0x88, 0x4002000}, {&(0x7f0000000cc0)=@in={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000e00)="36c2db2310505f994db26c3cf76c7cb27004b8563255ad70e76e146b4b502c0cec7c60e2f3c08aa6e37e1aa71af964d1afce8e8f9a0e6c57250bd1ef3994656e5a62837006f00c24d99e1486ed206864b78c129baa9d6fb00cffc801bd25541705c497f1fce14f8096f28bbd81b5ebcb7f4bf40d7a0731fa18", 0x79}, {&(0x7f0000000e80)="04ff1cc39a7090c2d3df19afbad54aded2955f6ab0f2e3b7e7cdfaef4ba4ab288ab0e5e7a5b06b195237f3b32f40705ec15c7f6a5db7d2c194f1d3d2176c310332070f91ebe78f2ffb6c90dc204d8e75f0288b527d6aae5e2323a18dd3b6a9993af0f765a0e1149cf4bcb72720a3f3a2218c7365ecc895bf0b0eb702e18c0d095d58f3db1cf4c2d90749c35dff020f6a7db1fa7970f0e07b", 0x98}], 0x2, &(0x7f0000000f80)=[@authinfo={0x18, 0x84, 0x6, {0x400}}], 0x18, 0x6c040}, {&(0x7f0000000fc0)=@in6={0xa, 0x4e22, 0x0, @private2, 0x4}, 0x1c, &(0x7f00000022c0)=[{&(0x7f0000001000)="bd1f9fd22173da57b42ff025171c7e88918867592e1ed67937fd37c9858c638d2ab1b7c6db0a6587b01ada54b2e8a172e2f9ef982bbc", 0x36}, {&(0x7f0000001040)="9919fc2f11e8a8db7d634fde4cc9d7cc11e97495fa92732ae3a7943eb03bb5da085c0a86d0e4952628428c3eb9688ba364820e7c73d1715f35ad143fe5d2f90dd2057bd396b34a550cb3e4391c01944e67b34ff0d9d4c34660f63416ae718773c149e1a8f63519a2c235c2c0ebea1cd949429a5ce19829a98c8da5b2132941555354e9efc9f26e5985c21bf80ffb7323ead97879065b321d5b8b3fd38d24ff9695ca0d5473952612bdff9cf5944f7f73f887a6e5411c1d51b988fac67a0713989fad4fa152191c0fcf1eb671c9fe86ade71d96", 0xd3}, {&(0x7f0000001140)="eef99842b023810d280a206ce89193cfef8c4adf9aaedc8ebee74b688319b298500a8a94aa8766b14906cac2f54e16ba514070888aa79714a6a4a5885291947f420a5eed693feb71a276e098d794fd5f49003c7f5132ad61", 0x58}, {&(0x7f00000011c0)="0a1a2fdbe7e959bd1a3e6d8e39fe7e2f2104c3683e51bc5343281b70e0eadf7e6a0a7aef594ebbe5ce86c453cbbb69984686e4504485b52918de01109dbd2c1fe9d3928edddbc90ddb88f9b49e195c49a703f6db4bf6e17b4d219786e640ae865687f0ff5ade55e9b4bd8789ec1bc0b25fcaa00558d89ccbb9af63741bf8b6402e04fe4bd936082659f359adbb6f23679aa93259a708e6e67893097d7de9a0a6a90b", 0xa2}, {&(0x7f0000001280)="3511d2a926ff3527fe88bc529a47b96ac9deda146045d13f79a21bb9c59d6b4429c0451e4c09d695ec74b548d2c11945c8d8219f94f5f3eebe9e7574f749e8527170c21729030504dac25c731d3048cb3d61aa310fdd1a4225d26605aff41286f0d26795ae7009279845ed6b8fa69268129a1083f648d315e9185983d4ec65da214aaceb6ee59c09b383f87a9a1b639835cb1e34add38d2b97cd530cdb8077c46e695cbe568e3dc677c5892970a4762303040c991a416140427ede582476c84daa2b8f8f8c07697ff312b301291da44aafea09cdeeda881d3a83740150a375c89e3992ffd05ed5fc8eb9ff22d7fb34657bf83de81adf43ca94b86501f68acb835095748b2ba732bfd23cf58f98d49a0487bad4eda136faa84be86235cca1a3ec87246a19e7ee69d0d60e6d290e39339256e6bfe214e1585509e4fc5b2e13dd379681601c660ffd07875d4cc5154a630561418f7989f2028cb2c2dff3320e8836c4d5a45b5490ea434c463f4f9743c302133ab202438affc70ee3ad7085413fe2729c2fbb0a5dfa1c1bb4db4fd2eaa6b61b91d2369206f943ae590c4a0b2e9aa6a394b8887498452fa178662aa0d9e0c1c4aae8aef004f0857b1ad0a3584b8c5f7dc01f4a07a87a5fbf71a0e21b8cb5190afe6fb7aafde7545f717dbd7c1977f20595b9909142a64486d3c9fae6a1e8fa7dc8517101e1fc9329ada3d3b466d80f2f89d4c6e2ce7e5d26de6068f8d2d6c264cce29623b18e736d59937c80972e785a706f92742a231568fd472cd5d1f97c8853de1a7d5c096187163d72275912699a7d40b33bc29dc778707fa58e87bbe61e7dfaf425e48ce6a82e06576daa77981734ebb578be1900146f147a3bec7851159eea05a025d063e6680004ec0287edc25959ff0b1920ec3bc32c7f329f8707ba943cc4b1fe4cb8bb9128d398bb3c1727dea9fb3a980ad3050bcd2a7b54fad7074dc5c8658fdb6b02087e161eb35fd0932c3f961ff92b88cb68865f4aebb39efa8d441693dabd647818f574ce8067d663b6eadd9c47079bd857ec17d8dfb1acbd23ca67631e6d3e11d9dfa47b5d655664da86a8003ea77459b2d613772a8adb143b23ee07440fc0db043684dfc01f81eef45b6f9e8c318185215bbd9a24e1dd63633d5d6cfd475d99ddff98d04b9a98b61b52af795259981a8638156d5bbf8e62d7655b927e8c327fde7276305a0b0b7c9209259c57a35f239dbd9f2b08aeff53eb228deb726664e877a4e11bdfd8007680b8d2f309f6a67253910e3e1f95ded4813b6ee0636f29d0371f5a9310d61e891bb0a2d3ae06d31607563e1dfbc09e59b65832ee3c25bd95e4fe0038038bbeadaca819584fd227b141571559e2b5720b452e83211ec1396c78d90ba189ce263b29494f738df7d9185467c85e7437836735ed7de3968ab5f5e4a2f8467385554076ac3fffa94e0eb77704807e5b1f29004d8977acf0c3228e29562f5e0489079b34852a9782a4ce327be7521194d92a7f5dab066d85e190f303ded8d61216e6731df3cf9f1341ce3162d7e639b8461861088c539175e58245be59ed7c456bee17369e482a10dbb311df466b48071d70d85e282cd72aca11b9b61a3e365a81086fc27d97b70e88ce6230a37ab3155b6053559b352efc6b7dbdb0c6b86851892f5b153576307e2ae89a50ddaee24ef6f49b830fd6866095ae011d5fc4e99494d8d3456cd0f0083d392caa5f3aecb155a05d98b1483f29b3b98fb2464418e1cf78cb6445399c410afcfd98f80baa299189ba77edfa4dbf45b26b412700839b8c5e6210312716ee6990c1c30e1d4c404b8da2063e11ceda145016358e2334dd2cb25640e3a870d7798e8b1489a01b11a38494e04a180555e61de627f0b6d3786a3de06a3b484e7421b9e8df1ab7b788bfd40a3d8457ee0d5153a8100753449e0eaaf2e8b08c9238e93f351cd1d117062180293a25a58c39d1b7b84864262b68880b6433cec6b909ab50321473b5621838e56cad20ea94ff6c21ab61c874c54dae127ca604148887958603f6c5341427dfeb07c170c7f5bdb1aac60dc60e09ed5a7387a5a8ac2d2ac0b84cbfbc8acd9893e7c3f5d25843566d25b0d08c7a19c4b2cb21156aa55235d0250d21c08463aebfa4fa07d2269c0c6bdb341cf28b1b81481aa46b19c1a953935cbac27f44fc443ae615ba4320643babff75c0c34721d7fff93a4b209760a102c6926e4be705e95037f884c305c63211e50764202a2ae938deaede2fbda6fd2eff714ef04e2b0afcd273cee71fded82a179e8ad8612b3ddd004ab67c83003c1b08cbad9185af63c80ff77c5f5c7d565b77688b4c2fd5a10dbdb4af65bc27300703339f9a75ba05920869103a3b4c9a999f5411ec4ac779ffab02607cc0fdd6ce9e848348022d0b650f1a09fa95896e0ada445de342798016f721a5099ad8d170c28a0d780f15265e32d1b0d180d6f83c796f66fdf3e44fa103aa418c8966cb25cf56544a3f9075250621bc4b99a1bdb38dd5d3d929d5eddd1ab92f7e03a4c7f5052b12cbd4d91276e49db441a0213f0295791a8768d9901c0d2b818a3328a175d8aad4faaff976785d91ec945fc0145a9278d8b264c8d5621c9b3dbe6046d12e0e7eff6fca54bb72f2569bd97d7debaf9a40994f73eab7695ee3a5f5fd0e4869ebdaaca724a176cb800689c84b5e158d323e59d0c563db161f50db24d034f6e5e68cf12b67417825a29dfec86b110e4eee2b23556eee25437372a55888b06e53817f6ec9a4d3864d0ae986b86bcd4f2977ae8cd78ca13bb558f7ca958cce72ad3ff7152efb489b004032474b96d4a988290aee33a4789d32c2669f778a8982496e8ee21c600b1d340db0ca2b2089d3edd1311ec9108c3e87a2ad26d0d3213644b7839b07ee51b5d8e5dc2af773c05571bb13f220d4c23485fd8946606fcbe1f84e5535a455006d78e003fdd9ce8996c625a8364f1474ab429972fb91e695903967b3385c161288795c236e645a6cb2ac632b718b8a4c9cd6165d6f5d82d111486a5cbfdd4bb8259e7e1826c55a38ba47deab9df4c8fca16f05cb262029ec61db1fa08941d5afb3130ea313e0eb0245dcec4bac1b56517957d480cdbc6e68400dbf3c1b728178eaf7b64259c43761da85f10c57cff4e2b08698c1660ab8a7e958f524401286ef6a4badd4562712e32aea15cb4345049c5558b5ef980472c7dbadbbc8a564eeaa0ba59bd3a0dbc42523219d807b2de3d90ac8366d2d8a29f7587172547921f61bf24da1aba7bc59412b11881467dd816e67adfa8ae6c4cf443118fcc98b0136fa206656ad5bc73668075b67b5532889a4a17022218f874099af651d7af375df899ab16356be9533a4491e0f3a8d623203f0a3338ba171082261b7d876f646659cc28174cb9e107ec2d3a6c184e427b7dbd532c900a359eefbad92f2b2a64ded3f75fe01f16086e13d46f453f753ed09ab11cfaf4c617327bc31545aecba777012c36bad6f594a395a18db4d598b8e5c38e248db5b3757d27fcac6609eb37c716aad318d2189b169ce351b964ef405756205899b88f9275c09c8117606f6ab867cc2f8f6b3b703168115c9d8de1e135213ed7f18402b298b3279a4a00c491f006a2715b2bd2599577820cf20ff2c06c232d14a456c41348accef6b089e4262261c6fa7df41d57d9879cd5a22ebfd2f79d32ce3ccf625e550b8b176e94ad1b334a7d9ae21ec4db010148780973b4303021d103c5f8a2692b66ae800a2ab427cb3e7dbd57f5d8215315e941dcbcb96ca089922bf0abb2b0edb60ba22fcf72939282454b536c7d971e384c2d33a2801bac298810e71fc83461c7277ada88c5469ff92256df31db0bce0d969957fcb7845c40de8dac91dcddc1c4ba282380d36d64781d761600121918f8cc7a871fe927c7812dab3fdb342b29dcaa955bc1f90cab42876142caf68e429a2e5b55c23224dfc00d49678c370266b568fd506f3509f8c3c0ba3c17105628a65b86bb1f7dc3e02b1f1bfd618c7de4141d016f36011b2f52c7d7e1f9b945418b4b604364ce346ff7c7524977745484474268823c84febd98479c8b66dd1e90a73da4ff76477b58d3f6f0f1c4f7776a76886fad5105d391ff46bb2e7074680d4e27b71140989c3eb1b94d56065225259637690e756cccdc429ff796d65826276e3bc22d74f20b3ddc99576d6c54e1a0b92eadf4e2e9ee1435c4ae5652f92b6eb659086e836ee866cf03558f9958eb9de4291420b7511dde2868e5da6682e4c9eeff163071c35eeb21cb4a161045b108d3d1fb95b174b80bced11dba55d3a23f0e3bffd4d0f0d9a75c5f825618e238fa15bf63fa1179b925fc06c8106d10ea9808331dd2e9182add86e84e6fff8c8d8e2552b190965734ea8afe27ee15fc930ad765c6665e8668615fbb5190618c2f05de0c62d0a2df86ac3c1746bd84f7b5bca5a3dfe6742dba2ffc6039209e2965d1b84187a5c40847820b45421cc42e8ceefc838a7f90116206bf03fb01f283bd04cc34d840f576cafe05ac3741736e2bbcb27be997ce48646a0f10ccc6f924bd31b2759a56ca803545ab678b66323755f2e9312811b9132a0fe5498a96f8cc14820d36532312ab2a26e48c5b4b67caac01772605c0da23f1a7604469919d17609ac5911ed5b31555d1206d1ea683b753e954f115ae25dd10e193efc82d828a3569667906789a1790d2c9a33ec42124b04690bf0750b195c60a0479b359fd3ae2af5220669ea6568c92fb0cfe5e8208a5864a9fd9d179ce1ec618363e032231266fb56cc1986f5b31aaf8b10e2c86ffdec93429522512d7af56b9858ec2f4875e6b2593044f1b8e268de0b6ac5030e4521c2d4efc972397f872911742b399421290fbfde2c070ab40c4ce96f5e4cb37c538503c784d1f39e6b2b557f5aec5d7f272ff1b0e161ccd05fcb1abac33a417b5647f577500ae45e9094cac69506da9a1dc8b58de79278cb5194690680b0b50c952a9b447a3cbbed9dbd031e251ad8ce04248d0347b2da6f0443767db4ff9b34eced687be93d7be53327a77da8b0b75580d17f2e5f88803e156a632361b16ade8fbc26ed789e7828e6fd61f32c81d1cc2a46fa4dfbeb1cf63ee62ea5419ecd1f4c1ae6860e861f531be5e45131e943301896836259b5631c9eda725e083d6c47024aba541928938f29e0a7b17271ecff9f4789823639edc0d9b5d71a5fbe3ef2f66ae4365fd67365bbd663f269bdcce62776eeedf82fe68727360c90558b03c4cea06c2643156e90c908020276770ea4da344b31d2b2c95e622d9fc157a967b949826df017243d6ecf26cfacc4a5d09f97da5f6fd4918f5c7e44e9ec93d7efa989e5005c86e9a9983642d41926a8ec865958782054d1a86acef88177355bfd939a2be2277f2b382110f65043ed474b6e4f14470ee79240d03fea9f5ee0cc26168413e4014af1ba203c69030d93ed73b2fe6221591fa3501b972ec216a9a82b92e39ca7565b9e2b366d432dc8be1314d7cca52cd4e140dc7d6622b6cfb96c5f82c567a7de44b6877135dcd7f43631e1c3dd69db22ddbba2a0bbc41394f385bdf068ab37ff8d50964d6021510db9326c68e718704e21c43e3c956ba649da8948254bd0748c059511d2e9aa9aecc2799d69c0246c86ad38c8893f5518e5cbe575fb371cc96e82ff2cbec9fa858cf1a01f4d6ba3b2b1e2d007a54ddb9194b0d2eaf2626cc929e20d10168690b9142527f818b949c32d64919db5e520b13366d925400c5d20fcf1476f14962477db6493", 0x1000}, {&(0x7f0000002280)}], 0x6, &(0x7f00000023c0)=ANY=[@ANYBLOB="180000000000000084000000060000007f0000000000000020000000000000008400000002000000040005820000010002000000", @ANYRES32=r4, @ANYBLOB="20000000000000008400000002000000ff0009800000010009000000", @ANYRES32=r7, @ANYBLOB="1800000000000000f8ff52efc54b000000000000"], 0x70, 0x4000000}, {&(0x7f0000002440)=@in6={0xa, 0x4e20, 0x22, @private2, 0x6}, 0x1c, &(0x7f00000026c0)=[{&(0x7f0000002480)="f83971a31ce4ac849d241279e5762f156431f3c644ecc4432274480ce2c5da397b3877405b40d4b3741455d0a0cc0ef3c9185a95630551843eb892e33c44f474bd1fbbf73886dbecb1bc72a49d1cb946b0d135e81579f827f7a8176e3840116dd9a335cbf39d9cdba60cd3cf4964c24a847b964b5dcc04583a84", 0x7a}, {&(0x7f0000002500)="c4adde02d409b63a6c54366ca01f23babec6dfae971806b7407aa5118b1bdfd25cdc605e9a15fd0722e8dc035214d3e16a31acc2979e983c15ac458227bb8a1a5068ac1ec0a23e9f29c410bbac0f9a9f785d7e3cd1a07e9242182d8ce95dbbdd9c10060a2bf19dd8e38004f67cf5c7a63b115be9f44a9dabe29dbb8e6904d45648b6fcc2dcd853f534af7f2781319051cea5e15173ff66c54475067f83c5a37fbab43b50625339", 0xa7}, {&(0x7f00000025c0)="9e7d6c1233e04c8cc96d20c4e230bbc25780834d30579e7695c5b5869748cdda095535db00f8325ca6d3b67c41449d3c1f480f75cfd30e184b385730303eaca199389e3fcf9fc863d63ec7293ac220d70621603e1a977ad05d73e02f5adc05f875454b2f6d02eab7516b91e5a419e910da50944fbac136834f6ca28ba46eb11d54b46ec7fb37733d9cf8fb531996621cd50436f4b0071d8df2ccc5f34c9d036ba01efb215c92bd0b1d1e13b362b517bb2b1af70b8235c8a0380a6093059ddaef1f68643341014c", 0xc7}], 0x3, &(0x7f0000002700)=[@init={0x18, 0x84, 0x0, {0xfb3, 0xd, 0x3ff, 0x29a}}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0xc}}, @init={0x18, 0x84, 0x0, {0x8, 0x1, 0xc, 0x100}}], 0x48, 0x6004040}], 0x5, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x200000000}, 0x18) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) r10 = epoll_create(0x1) r11 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x280, 0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r11, &(0x7f0000000140)={0x40000011}) openat$nci(0xffffffffffffff9c, &(0x7f00000012c0), 0x2, 0x0) sendmsg$tipc(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c27", 0x39}], 0x1, 0x0, 0x0, 0x800}, 0x0) recvmsg(r8, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) 46.914203877s ago: executing program 1 (id=84): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) 46.803051299s ago: executing program 1 (id=86): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000940)={[{@barrier_val}, {@resuid}, {@block_validity}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000180)="$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") openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 46.605416742s ago: executing program 1 (id=90): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6ae}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 46.357432677s ago: executing program 1 (id=95): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x16000000, 0x6}, 0x4000, 0x10000, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20010006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000940)={[{@barrier_val}, {@resuid}, {@block_validity}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000180)="$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") openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioprio_set$uid(0x3, 0x0, 0x0) 46.357221077s ago: executing program 32 (id=95): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x16000000, 0x6}, 0x4000, 0x10000, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20010006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000940)={[{@barrier_val}, {@resuid}, {@block_validity}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000180)="$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") openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioprio_set$uid(0x3, 0x0, 0x0) 38.330868186s ago: executing program 3 (id=181): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='kfree\x00', r0}, 0x18) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x40) syz_usb_disconnect(r1) 37.588904s ago: executing program 3 (id=191): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x5) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) recvmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x5, &(0x7f0000000080)=[{0x45, 0x0, 0x2}, {}, {}, {0x20, 0x0, 0x0, 0x20}, {0x6}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001700)={0x18, 0x1f, &(0x7f0000000200)=ANY=[@ANYBLOB="180002000000ffff0000ac4fd471000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018200000", @ANYRES32=0x1, @ANYBLOB="0000000062820000184a0000080000000000000000000000185800000d00000000000000000000009500000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000c000000850000000600000041745000ffffffffbf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x1, 0x86, &(0x7f0000001500)=""/134, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000015c0)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0x0, 0x4, 0x400}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000001640)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001680)=[{0x1, 0x1, 0xc, 0x2}, {0x5, 0x4, 0x10, 0x1}, {0x5, 0x5, 0xd, 0x7}, {0x1, 0x1, 0x1, 0x8}, {0x4, 0x4, 0x4, 0x7}], 0x10, 0x1}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000001600), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4, 0x0, 0x1}, 0x18) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r5, 0x400, 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\"\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000041000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70400000800000085000100000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) io_submit(r7, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r6, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='kmem_cache_free\x00', r9}, 0x18) r10 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f00000001c0)={&(0x7f0000000040)=@qipcrtr={0x2a, 0x1, 0x4000}, 0x80, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000018c0)={'wlan1\x00'}) 36.348765315s ago: executing program 3 (id=205): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x55f, &(0x7f0000000d00)="$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") r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0x100, @remote}}}, 0x108) 33.312139245s ago: executing program 0 (id=242): r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000340)='./file0\x00'}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYRES64=r3, @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x4}, 0x18) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000500)={r4, 0x1, 0xfffffffffffffff9, 0x10}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000640), r0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r7, 0x5421, &(0x7f0000000140)=0x1) writev(r7, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(r7) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=@gettaction={0x60, 0x32, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x4c, 0x1, [{0x14, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x4c000) 33.184412117s ago: executing program 0 (id=246): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000f80)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x1, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x3, 0x6}, {0x1000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x20000}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {}, {0x1}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x7}, {0x0, 0x0, 0x0, 0xfffffffd}, {0x4}, {0x0, 0x2, 0x0, 0x0, 0xfffffffc}, {}, {0xffffffff}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x10000000}, {0x0, 0x1, 0x0, 0x1, 0x0, 0x2}, {0x7}, {}, {0x0, 0xfa6}, {}, {0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x8}, {}, {0x4}, {}, {0x0, 0x800000}, {}, {}, {}, {0x0, 0x0, 0x2}, {0x4, 0xc000000}, {}, {0x0, 0x80000000}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x0, 0x40000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x3}, {0x0, 0x10000, 0x0, 0x404}, {0x0, 0x0, 0x0, 0x2, 0xfffffffd}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x100000}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x20000}, {}, {}, {}, {0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0xc, 0x0, 0x100000}, {0x8}, {0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {0x0, 0x0, 0x1, 0x0, 0x747}, {0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffe}, {0x200000}, {}, {}, {0x0, 0x6}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x2, 0x0, 0x0, 0xb}, {}, {}, {}, {0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x2}], [{0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3}, {}, {}, {}, {}, {0x5}, {0x0, 0x1}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x40) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4f, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x10, 0x7, 0x2, 0x8}}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) (async) r5 = socket$netlink(0x10, 0x3, 0x0) (async) r6 = socket(0x1a, 0x803, 0xfffffffc) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r7, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9}, 0x10) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) connect$inet6(r11, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r11, 0x4000000000000, 0x4, 0x0, 0x0) (async) r12 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="200000a93116d90400000000", @ANYRES32=r7, @ANYBLOB="7fff000000000000"], 0x20}}, 0x0) (async) r13 = socket(0x1, 0x803, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000280)='xprt_ping\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) getsockname$packet(r13, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001e00)=ANY=[@ANYBLOB="9c020000130000082cbd7000fcdbdf2507000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x29c}, 0x1, 0x0, 0x0, 0x891}, 0x804) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r11, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r12, {0xf}}, './file0\x00'}) setsockopt$inet6_IPV6_XFRM_POLICY(r14, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@private2, @in=@multicast1, 0x4e20, 0xc000, 0x4e20, 0x6, 0xa, 0x0, 0x0, 0x89, 0x0, 0xffffffffffffffff}, {0x2, 0x10001, 0x4d, 0x8, 0x7, 0x2, 0x3, 0x5}, {0x5, 0x0, 0x2, 0x76d4}, 0x0, 0x6e6bc0, 0x1, 0x1, 0x2, 0x1}, {{@in=@remote, 0x4d6, 0x2b}, 0x8, @in=@dev={0xac, 0x14, 0x14, 0x11}, 0x3506, 0x2, 0x0, 0xfb, 0x4, 0x7, 0x4}}, 0xe8) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 33.04680595s ago: executing program 0 (id=247): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1a}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4004050}, 0x40) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x608000, 0x151, 0x23}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) getpid() r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) munlockall() 33.01899179s ago: executing program 0 (id=248): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x16000000, 0x6}, 0x4000, 0x10000, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20010006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000940)={[{@barrier_val}, {@resuid}, {@block_validity}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000180)="$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") openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 32.689390727s ago: executing program 0 (id=255): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80000) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000140), 0x84, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x6, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf8, &(0x7f0000000380)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000003c0), &(0x7f0000000440), 0x8, 0xb3, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r3, @ANYRESHEX=r4], &(0x7f0000000080)='syzkaller\x00', 0x8a, 0x0, 0x0, 0x40f00, 0x0, '\x00', r5, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) io_setup(0x1ff, &(0x7f0000000040)=0x0) io_destroy(r8) r9 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r10 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r10) write$binfmt_script(r9, &(0x7f00000003c0)={'#! ', './file0'}, 0xb) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) execveat(r9, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 31.841384074s ago: executing program 3 (id=265): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x16000000, 0x6}, 0x4000, 0x10000, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20010006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000940)={[{@barrier_val}, {@resuid}, {@block_validity}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000180)="$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") openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 31.640087587s ago: executing program 3 (id=267): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r1, 0x114, 0x3f, &(0x7f0000000000)=ANY=[], 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0xfffffffd, 0x0, 0x0, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x1a0}}, 0x800) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000001840), 0x4) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000240)={0x32, 0x12, 0x2, 0x5, 0x0, [@mcast2, @mcast2, @mcast2, @mcast2, @empty, @dev={0xfe, 0x80, '\x00', 0x1c}, @mcast1, @private1, @ipv4={'\x00', '\xff\xff', @loopback}]}, 0x98) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000680), 0x80c02, 0x0) write$cgroup_int(r5, 0x0, 0x2) 31.332739843s ago: executing program 0 (id=271): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x2, 0xd7, 0x8c, 0x1ff, 0x61, @local, @mcast2, 0x40, 0x1, 0xfffffff9, 0x80000003}}) r0 = socket$inet(0x2, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000400)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r6, 0x0, 0x0, 0x64, 0x183000, 0x23456}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r10}, 0x10) pipe2$9p(&(0x7f00000000c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x90, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r11}, 0x10) 31.315495894s ago: executing program 33 (id=271): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000001c0)={'ip6tnl0\x00', 0x0, 0x2, 0xd7, 0x8c, 0x1ff, 0x61, @local, @mcast2, 0x40, 0x1, 0xfffffff9, 0x80000003}}) r0 = socket$inet(0x2, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000400)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r6, 0x0, 0x0, 0x64, 0x183000, 0x23456}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r10}, 0x10) pipe2$9p(&(0x7f00000000c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x90, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r11}, 0x10) 10.744670389s ago: executing program 7 (id=432): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r1, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000550300000800000095"], &(0x7f0000000000)='GPL\x00', 0x800, 0x0, 0x0, 0x0, 0x2a}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x200) ioctl$IOC_PR_REGISTER(r3, 0x401870c8, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0xd) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000000100)=0xc886) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000004080002400000000000010000020a0500000000000000000000000004090001"], 0x190}}, 0x0) 10.481284284s ago: executing program 7 (id=437): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x900, 0x1a4) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0xc, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x10, r0, 0x2) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) timer_create(0x2, &(0x7f0000000480)={0x0, 0x21, 0x2}, &(0x7f00000004c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0xa, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0xa44c, 0x800, 0x5, 0x20e}, &(0x7f0000000240)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r5, 0x0, 0x6}, 0x18) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) bind$tipc(r6, 0x0, 0x0) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0), r1) sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r7, 0x8, 0x7fff, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x5a1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4080}, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x400, 0x1}) 9.893579566s ago: executing program 7 (id=444): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c00"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x810000, &(0x7f0000000580), 0x1, 0x557, &(0x7f00000005c0)="$eJzs3d9u01gewPGfS7NbAkKr3RVCVYFD2ZWKVIKTQFDEldc5SQ84dmQ7qL1CFU1RRQorykrbXi037Iw08xDczhPM1TzCPMbcoXmEGdlOaNrmD3TahmG+nwjsxD/7/I6J/MNJfCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAst2bbRUs847dX1WhuLQyaY5b3t3frwGRMuyJW8kfm5uRK9tKVv+8vvpz8tSgL2bMFmUsmc7J34fJfHvxtdqa//piEzsTO7t7z9W638+oT1pl60ieooX0TBabpNLQyUaCqlYp9Z6UeqbrxdLQWxbqp3FA7cRCqJfeWKlarZaULa0Hbb9QcT/dfvH+7ZNsV9bDQ0k4YBf6dh4XIXTGeZ/xGGpMsTmLuJ2/ERyZWsXaaSm1udTtlpdSFcUkmQcVJPUmCSpOCSnapVCyWSsXKveq9+7Y9e+QF+xA5EjH9Ny2m64SP4MDxzfTqv3hixJe2rIoa+nClJqEE0pTc0OU9/fr/zzt6bLuD9b9f5a/sL56XtP5fy55dG1X/R+R6do8d2ZU9eS7r0pWudOTV1DM620dDtPhiJJJAjDTFSV9RvVeUVKUiFbHliaxIXSJRUhcjnmiJZE0iiUVLM313haLFkVgCCUXJkrhyS5QUpSpVKYsSLQVZk0Da4ktDauKkW9mUrXS/l0dmeF4+BBXHdORDUGlMEPUfv93JH8SBY/qlX/9Hy51dNgAAAAAA4DRY6afvVnqafzWdqxtP29NOCwAAAAAAnKD0m/+FZJJ+zX9VLM7/AQAAAAD40ljpNXaWiOTlejbXvxKKDwEAAAAAAPhCpN//X0sm+WTuulic/wMAAAAA8KX5avgY+3/qLbYsiVp/tn74WcIwZ71prf7j0ffpAmf7XBZx7vAW4/q8dak3UG86qcz2nrl6weqNfvlhEMz32ScQ7zdHjfV/sZeH1U/A2naOm4B8IzeymBsb2XSjvyQbUThfN54uuIH3oCiOc2km1qvxf15s/VfS7n/tNy9ZsrnV7RSevuxupLm8SbbyZrs3gOLIcRSH5PI6HW8hveZi6OjGufRCjKxd639Zu/Zg/2ey1Wc+of9vZTGLWcxn0/zB/s8lbRYLo3qfz7IoHur50F6PzeJmFnNz6WY2GZJFaWQWSXNb3U6pdX4/i+H7ov/WOH4W5Un7otzfF7n95j/lXwQApmVzQhWy5EjdPcZRblh1/2mwlROp7m9lKYtZmk8PrLPzQ47o9qQjuv0xdX1MFt/lDt8DaVSNTdr99lBVfZes8G5ku5FXspJdeO719r/l8s7u3u2t7fVnnWedF6VSuWLfte17Jcml3ehNqD0AgCEm32NnYoR1d8JZ9V8v9n9SUJCn8lK6siHL6dUG6S8Ohm41P/AzhOUJZ635gTu8LE84q8sP3Ojl42PLWdyR/4wAAPD7tDihDk+s/yKyPOG8+2AtH392PFjLAQDA6dDheysf/98KQ9N6UqxWi068olUYuI9UaGoNrYwf69BdcfyGVq0wiAM38JKZx6amIxW1W60gjFU9CFUriMxqeud31bv1e6Sbjh8bN2p52om0cgM/dtxY1Uzkqlb7X56JVnSYrhy1tGvqxnViE/gqCtqhqwtKRVoPBJqa9mNTN8msr1qhaTrhmnoceO2mVjUduaFpxUG2wX5bxq8HYTPdbGHaOxsAgM/Ezu7e8/Vut/PqFGem3UcAAHAQVRoAAAAAAAAAAAAAAAAAAAAAgM/fWVz/N/2ZH7O7CMjJbzn3eXSQmT/qjHVaW572kQnAafs1AAD//46NTvI=") 9.799449397s ago: executing program 7 (id=446): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x16000000, 0x6}, 0x4000, 0x10000, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20010006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000940)={[{@barrier_val}, {@resuid}, {@block_validity}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000180)="$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") openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 9.65962046s ago: executing program 7 (id=447): r0 = semget(0x0, 0x2, 0x2b) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x14, 0x30, 0x53b, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) semctl$SEM_INFO(r0, 0x1, 0x13, &(0x7f0000000240)=""/207) clock_gettime(0x0, &(0x7f0000000080)) r3 = mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x150x0, &(0x7f0000000680)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x6}, 0x18) 6.755904288s ago: executing program 5 (id=505): prctl$PR_SET_NAME(0xf, &(0x7f0000000a40)='GPL\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='kmem_cache_free\x00', r0, 0x0, 0x7}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x3000000}, {0x1, 0x0, 0x4, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000, 0x0, 0x0, 0x1}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {}, {}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {0x4}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7}, {}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x27f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x0, 0x2, 0x0, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x4, 0x7, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d}, {0x0, 0x0, 0x8000}, {0x0, 0x8000}, {0x0, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x3}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 6.711146358s ago: executing program 5 (id=506): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 6.676661819s ago: executing program 5 (id=507): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r2) 6.6274362s ago: executing program 5 (id=509): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x16000000, 0x6}, 0x4000, 0x10000, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20010006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000940)={[{@barrier_val}, {@resuid}, {@block_validity}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000180)="$eJzs3c1rXFUbAPDnTpImTfu+zQsv2LppVloonbQ1tgqCERciWCjo2jZMpiFmkimZSWlCFhYRBBG0uBB049qPunMruvZvcCMiLVXTYsWFjNz5SKb5mHw0k2mb3w9ucs6dc+ecZ+7cc8/MPcwNYM8aTP9kIo5ExIdJxKH6+iQieqqp7oiRWrl7iwu5dEmiUnn996Ra5u7iQi6atkkdqGcOR8T370Ycz6yutzQ3PzlaKORn6vmh8tTlodLc/ImJqdHx/Hh++syp4eHTZ589e2bnYv3zx/mDtz565emvR/5+54kbH/yQxEgcrD/WHMdOGYzB+mvSk76E93l5pyvrsKTTDWBb0kOzq3aUx5E4FF3VFADwOEvP/xUAYI9JnP8BYI9pfA9wd3Eh11g6+43E7rr9UkT01eJvXN+sPdJdv2bXV70O2n83ie76FdHYwetdgxHx2bdvfpku0abrkABreftaRFwcGFzd/yer5ixs1clNlBlckdf/we75Lh3/PLfW+C+zNP6JpfHPst41jt3tGIzY15xfffxnbq654Ys7UHl9/PdCbW5bGmjT+G9p0tpAVz33nzRzNCImCvm0b/tvRByLnt5LE4X8qRZ1HLvzz531Hmse//1x/a0v0vrT/8slMje7e+/fZmy0PPogMTe7fS3iye7luX33VvX/fdWx7sr9n6473+qJjy4nX33+vU/XK5bGn8bbWFbH316VzyOeirXjb0hazk8cSnf/ydrftev45udP+terv3n/p0taf+OzwG5I939/6/gHkub5mqWdrX/j+Nd+/+9L3qimG53H1dFyeeZUxL7ktdXrTy9v28g3yqfx1yJdGX+m5fs//SR4cZMxdt/67avtx7+kLVMs0/jHtrT/t564cW+ya/vxp/t/uJo6Vl+zmf5vsw18kNcOAAAAAAAAAAAAAAAAAAAAAAAAADYrExEHI8lkl9KZTDZbu4f3/6M/UyiWyscvFWenx6J6r+yB6Mk0furyUC2fNH7/dKApf3pF/pmI+F9EfNy7v5rP5oqFsU4HDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1B9a5/3/q195Otw4AaJu+DUvcyd+XrVQqlTa2BwBov43P/wDA46bF+X//brYDANg9Pv8DwN7j/A8Ae4/zPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG12/ty5dKn8tbiQS/NjV+ZmJ4tXTozlS5PZqdlcNlecuZwdLxbHC/lsrji10fMVisXLwzE9e3WonC+Vh0pz8xemirPT5QsTU6Pj+Qv5nl2JCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2pjQ3PzlaKORnHovE+xHxEDSjHYkkHopmdCTxy4mfDrcqc32Dt/HIQxHFI5bodM8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Gj4NwAA//8PbSWm") openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 6.426247864s ago: executing program 5 (id=511): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 6.424349454s ago: executing program 6 (id=512): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 6.341480276s ago: executing program 6 (id=514): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000a000000850000007300000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x8090) r5 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, &(0x7f0000000580)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xd0}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) wait4(r5, 0x0, 0x40000000, 0x0) 6.169162309s ago: executing program 6 (id=521): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x16000000, 0x6}, 0x4000, 0x10000, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20010006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000940)={[{@barrier_val}, {@resuid}, {@block_validity}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000180)="$eJzs3c1rXFUbAPDnTpImTfu+zQsv2LppVloonbQ1tgqCERciWCjo2jZMpiFmkimZSWlCFhYRBBG0uBB049qPunMruvZvcCMiLVXTYsWFjNz5SKb5mHw0k2mb3w9ucs6dc+ecZ+7cc8/MPcwNYM8aTP9kIo5ExIdJxKH6+iQieqqp7oiRWrl7iwu5dEmiUnn996Ra5u7iQi6atkkdqGcOR8T370Ycz6yutzQ3PzlaKORn6vmh8tTlodLc/ImJqdHx/Hh++syp4eHTZ589e2bnYv3zx/mDtz565emvR/5+54kbH/yQxEgcrD/WHMdOGYzB+mvSk76E93l5pyvrsKTTDWBb0kOzq3aUx5E4FF3VFADwOEvP/xUAYI9JnP8BYI9pfA9wd3Eh11g6+43E7rr9UkT01eJvXN+sPdJdv2bXV70O2n83ie76FdHYwetdgxHx2bdvfpku0abrkABreftaRFwcGFzd/yer5ixs1clNlBlckdf/we75Lh3/PLfW+C+zNP6JpfHPst41jt3tGIzY15xfffxnbq654Ys7UHl9/PdCbW5bGmjT+G9p0tpAVz33nzRzNCImCvm0b/tvRByLnt5LE4X8qRZ1HLvzz531Hmse//1x/a0v0vrT/8slMje7e+/fZmy0PPogMTe7fS3iye7luX33VvX/fdWx7sr9n6473+qJjy4nX33+vU/XK5bGn8bbWFbH316VzyOeirXjb0hazk8cSnf/ydrftev45udP+terv3n/p0taf+OzwG5I939/6/gHkub5mqWdrX/j+Nd+/+9L3qimG53H1dFyeeZUxL7ktdXrTy9v28g3yqfx1yJdGX+m5fs//SR4cZMxdt/67avtx7+kLVMs0/jHtrT/t564cW+ya/vxp/t/uJo6Vl+zmf5vsw18kNcOAAAAAAAAAAAAAAAAAAAAAAAAADYrExEHI8lkl9KZTDZbu4f3/6M/UyiWyscvFWenx6J6r+yB6Mk0furyUC2fNH7/dKApf3pF/pmI+F9EfNy7v5rP5oqFsU4HDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1B9a5/3/q195Otw4AaJu+DUvcyd+XrVQqlTa2BwBov43P/wDA46bF+X//brYDANg9Pv8DwN7j/A8Ae4/zPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG12/ty5dKn8tbiQS/NjV+ZmJ4tXTozlS5PZqdlcNlecuZwdLxbHC/lsrji10fMVisXLwzE9e3WonC+Vh0pz8xemirPT5QsTU6Pj+Qv5nl2JCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2pjQ3PzlaKORnHovE+xHxEDSjHYkkHopmdCTxy4mfDrcqc32Dt/HIQxHFI5bodM8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Gj4NwAA//8PbSWm") openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 6.036319812s ago: executing program 6 (id=522): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r2) 5.770481947s ago: executing program 7 (id=525): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) r3 = gettid() sched_getaffinity(r3, 0x8, &(0x7f0000000080)) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x200000000}, 0x18) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r7}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) syz_io_uring_setup(0x2801, &(0x7f0000001480)={0x0, 0xb35d, 0x1000, 0x7, 0x40224}, &(0x7f00000006c0), &(0x7f00000000c0)) ptrace$ARCH_GET_FS(0x1e, 0x0, &(0x7f00000000c0), 0x1003) r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x2400000, 0xa, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff}) read$msr(0xffffffffffffffff, &(0x7f0000001bc0)=""/4080, 0xff0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a0101000000000000000001000000090003001e007a3200000000080007006e6174000900010073797a310000000014000480080002407c40280f080001400000000028000000000a05000000000000000000010000080900010073797a3100000000080002"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x8, @mcast1, @local, 0x7, 0x7, 0x202, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 5.750117147s ago: executing program 35 (id=525): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r2}, 0x18) r3 = gettid() sched_getaffinity(r3, 0x8, &(0x7f0000000080)) r4 = socket$inet6(0xa, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x200000000}, 0x18) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r7}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), 0xffffffffffffffff) syz_io_uring_setup(0x2801, &(0x7f0000001480)={0x0, 0xb35d, 0x1000, 0x7, 0x40224}, &(0x7f00000006c0), &(0x7f00000000c0)) ptrace$ARCH_GET_FS(0x1e, 0x0, &(0x7f00000000c0), 0x1003) r8 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x8401) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7ff, 0x2400000, 0xa, 0xfffffffffffffffd, 0x59c, 0xffffffffffffffff}) read$msr(0xffffffffffffffff, &(0x7f0000001bc0)=""/4080, 0xff0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a0101000000000000000001000000090003001e007a3200000000080007006e6174000900010073797a310000000014000480080002407c40280f080001400000000028000000000a05000000000000000000010000080900010073797a3100000000080002"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x8, @mcast1, @local, 0x7, 0x7, 0x202, 0x8}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 3.142851769s ago: executing program 5 (id=555): perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, &(0x7f0000000c80)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x200000000}, 0x18) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) r2 = epoll_create(0x1) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x280, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000140)={0x40000011}) openat$nci(0xffffffffffffff9c, &(0x7f00000012c0), 0x2, 0x0) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c27", 0x39}], 0x1, 0x0, 0x0, 0x800}, 0x0) recvmsg(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) 3.142706059s ago: executing program 36 (id=555): perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, &(0x7f0000000c80)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)}, &(0x7f0000000180)=0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000340)='kfree\x00', 0xffffffffffffffff, 0x0, 0x200000000}, 0x18) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000140)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x10) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) r2 = epoll_create(0x1) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x280, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000140)={0x40000011}) openat$nci(0xffffffffffffff9c, &(0x7f00000012c0), 0x2, 0x0) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c27", 0x39}], 0x1, 0x0, 0x0, 0x800}, 0x0) recvmsg(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) 2.03622671s ago: executing program 6 (id=564): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000000000060400", 0x32}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 1.993933881s ago: executing program 37 (id=564): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad0002000000000000060400", 0x32}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 1.984126702s ago: executing program 8 (id=568): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8901, &(0x7f0000000340)={r0}) (fail_nth: 1) 1.688421458s ago: executing program 2 (id=569): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000140)='./file1\x00', 0x1000c01, &(0x7f0000000040)=ANY=[], 0x5, 0x811, &(0x7f0000002380)="$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") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_open_dev$loop(0x0, 0xffffffffffffffff, 0xea80) ioctl$BLKDISCARD(r4, 0x1277, 0x0) sendto$inet6(r3, &(0x7f0000000000)="aa", 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x28) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r6 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x2, &(0x7f0000000280)='\xebU\x95\xa4i\xea`\xe0[\x9a\x84\x11\xc9&R:\xe9\xea\xec\xe05@b\x1f\xab\xb7\xe6\xd4\x18\xe7D@\xf5\xb2\xb4\xe8i$\x038\x99\xfb;\xbeR\xbf\xc2\r\x13\xf0\xf0\xec\x94\xad\nA\xee>\xb3i4\\\xc8\xd7 \x8d\xe0D\x953|) \xd8p\x12\x11\x81\x7f\x93\a\xfb!\x83\xc2\xd8\xe4\x98\xae\xb7\f\x0fR\xd3\xad\xa5\xca\xd5\xc2\bv+\x9a\x94\xd0\x05\x8d\xef\x9f94>\xa5?\x9a\x11Et\xef\xea\xe9e\x81\'jB\xca\f\xccz\x15x\x1cn\xe4\xf3\xbd\xb4q{\xb33\xffM\x95Jm\x90\x00\x15\r\xc8R\xb4\xf89>\xb7\x1e\xe3\x99\x99_~\xdb\xdc\xfd\x0f\x8f\xfc\xe4\xa4\xe8\x03K\xea\xb2\x91H|EB\xfd2\x10atXE\xee\xf4\x13c\xb5u\x85w$\xd3}\x19\xe7n\xf9\xe7\x11@\xceB\xd7/\xde\x80F\xe0\xd0dI\xedfq]\xb1\xaa\x9b)\\o\xd1\xdcx\x06\x80\x9f\xb3\xcc\r\b\xcb\xb1\x1c\x03G\xe4\xf0H`\x0e\xe1\xc7\x13\x9e%J\xe6\xe2\xe6\xb4:\xa8\xf51~\xc5\x8a\xfe++s\x0f\xa9\x00\x00A\xb8\xf1\xdb', &(0x7f00000000c0)="8c", 0xff57) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r7, 0xffffffffffffffff, 0x0, 0x4002}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x14, 0xc, 0xfffffe00, 0x2, 0x0, 0xffffffffffffffff, 0xbf22, '\x00', r7, 0xffffffffffffffff, 0x4, 0x1, 0x5}, 0x50) 1.55928858s ago: executing program 8 (id=571): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000400)='cachefiles_read\x00', r2, 0x0, 0x2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) signalfd(r1, &(0x7f0000000380), 0x8) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0xfffffffe, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xa, 0xffe0}, {0xffff, 0x6}, {0xfff3, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x48801}, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000c0000000b30000007f"], 0x50) rseq(&(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x808, 0xffffffffffff97b9, 0x3}, 0x2}, 0x20, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r8, &(0x7f0000000500)=ANY=[@ANYBLOB="2b63740000dcd599857d26a56d52b15e23f65ead7f42311781fbe4bf45622d62725a71bdb245d55380921876d8173be9aae7f9defd356c41614a29fe470a56c9c2c83522f0f816f2935510ee1cb997f9ce6f87ce93726dde5c61ff1d9a535d7596bf3d79fb06e12e0b03e432c8964703047a33badc9bbd449ec22137f98cd1ffe18e8b2fc54376aac75b07837bb1e1551dfa"], 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x1b, 0x1a, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000080000000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018400000fdffffff0000000000000000183a000003000000000000000000000018360000020000000000000000000000f19600f00e00000018440000fbffffff000000000000000081964ff90500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb70363730a27df715a7800000100000085000000820000009500000000000800"], &(0x7f0000000840)='syzkaller\x00', 0x2, 0xa3, &(0x7f0000000680)=""/163, 0x40f00, 0x2e, '\x00', 0x0, @fallback=0x16, r7, 0x8, &(0x7f0000000980)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0)=[r5, 0xffffffffffffffff], &(0x7f0000000e00)=[{0x3, 0x1, 0xf, 0xd}, {0x2, 0x2, 0x5, 0x6}, {0x0, 0x2, 0x0, 0x3}, {0x5, 0x1, 0xb}, {0x1, 0x1, 0xf, 0x4}, {0x3, 0x1, 0x7, 0x4}, {0x4, 0x5, 0x5}, {0x4, 0x3, 0xe, 0x2}], 0x10, 0x50}, 0x94) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="18200000", @ANYRES16=r9, @ANYBLOB="01002cbd7000fedbdf251100000004000980"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c30000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r11, 0x0, 0xb}, 0x18) syz_io_uring_setup(0x14f5, &(0x7f00000005c0)={0x0, 0xb1b2, 0x40, 0x3, 0x307, 0x0, r2}, &(0x7f0000000040), &(0x7f0000000180)) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r12) 1.52158095s ago: executing program 4 (id=572): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 1.359540774s ago: executing program 4 (id=573): openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x800, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x2008, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0xa, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000800000000000003000000850000002c00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x300, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000a40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e000000000000003a0900001f00002004000000", @ANYRES32, @ANYBLOB="f8ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20001, 0x122) r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/vmstat\x00', 0x0, 0x0) syz_io_uring_setup(0x7861, &(0x7f0000000440)={0x0, 0x7baf, 0x18000, 0x3, 0x32c}, &(0x7f0000000680)=0x0, &(0x7f0000000280)=0x0) setpgid(0x0, r4) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1400000004000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000e5f0475cb5b7a56d4c3d8defe7479cd0ea607ef0e9033cdc909a3bbced126e56469c9096a61c75c50c916758e8a9308620b1b0bdf2c65d4c1307f5aa1af7081e8ef66844611f9a4371d1c2562ad22ccff257727859e05d59c0c375a49c678a4042158a9c2a85a95f66768a70a744a0abfff2a9da6185b8d8712a57c1b8b8e20084c1adf113134b2e33b7cf1e027d7d786a7bdb"], 0x48) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r10}, 0x18) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, &(0x7f00000001c0)={0xffffffff, 0x4, 0x0, 'queue0\x00', 0x400}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r11, 0x40605346, &(0x7f0000000300)={0x0, 0x0, {0x3, 0x2, 0x8000, 0x2}, 0x5}) syz_io_uring_submit(r8, r9, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r7, 0x6, &(0x7f0000000580)=""/199, 0xc7, 0x2, 0x1}) 1.221493017s ago: executing program 8 (id=574): prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@ipv4_newrule={0x38, 0x20, 0x301, 0xfffffffc, 0x25dfdbfe, {0x2, 0x0, 0x10, 0x0, 0x9, 0x0, 0x0, 0x7, 0xf}, [@FRA_GENERIC_POLICY=@FRA_OIFNAME={0x14, 0x11, 'veth1_to_hsr\x00'}, @FRA_SRC={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xa}}]}, 0x38}}, 0x44004) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x2e, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='kfree\x00') r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f00000000c0)={0x401, 0x1, 0x4, 0x5, 0xc3, "0982aa40b479ed3800e3ffffab5a18ffe500", 0x5, 0x1ff}) prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='\x00') ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000001c0)=0xff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x39}, 0x18) unshare(0x4a000200) 823.912294ms ago: executing program 8 (id=575): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$vcsu(&(0x7f0000000000), 0x0, 0x200) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x82000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000b19c00000000000000000000000000000091da2d66000000a6b4df52ef013b17a47f090300000099c2124ef4ee63b55434317e46656468e740492e05da6c65651d45ef3d949845572a933c8b28b0e143dbf1f397bca803b79e95a809410207b55595d9090035bfc0cc0e3ee8b6973020cfa653c159acafc5e86deb3210a3dbe27d958246cdd5283d981b8e63f8ec819136ebef7856236a6a5610ae50e3f59ea83c37ae3c3f6c75246a23bab5cfedb659c2"], 0x50) 823.262985ms ago: executing program 2 (id=576): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'team0\x00'}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x20, 0x70bd2a, 0x25dfdbfa, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xc}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x2c, 0x2c, 0x800, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0xffff}, {0xe, 0x1}, {0xb}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x1}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000004000000050000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000095"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r6}, &(0x7f0000004000), 0x0}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00'}, 0x18) sendmsg$NL80211_CMD_GET_SCAN(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES16=r8, @ANYBLOB="0107000000000600000020000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x6, 0x4, 0x9, 0x1e, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x20, 0x700, 0x10, 0x2}}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) 665.336148ms ago: executing program 8 (id=577): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x51cfa, 0x0, 0x8000008, 0x3, 0xfffffffe, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f00000001c0)={0x800100, 0xfffffffd, 0x22, 0x6, 0x1101, 0x1}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r2, 0x18000000000002a0, 0xeff, 0x7, &(0x7f0000001240)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x118800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xe, 0x0, 0x0, 0xfffffffffff7bbfe, 0x3, 0x0, 0x0, 0x602}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 658.853498ms ago: executing program 4 (id=578): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0xd) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010100000000000000000a0000000900010073797a300000000048000000030a010200000000000000000a0000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000004080002400000000000010000020a0500000000000000000000000004090001"], 0x190}}, 0x0) 610.648678ms ago: executing program 4 (id=579): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000150001030000000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 571.515889ms ago: executing program 4 (id=580): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x7, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000140)='./file1\x00', 0x1000c01, &(0x7f0000000040)=ANY=[], 0x5, 0x811, &(0x7f0000002380)="$eJzs3U1sHHcVAPA3rp04jkirgkoUpekkKVIiUndtty5WD2W7HjvT2rvW7holqlAbNU6J4vRTVWmEaHNpASEhThxLOVa99AZCAokDcEKiBy4ckCr1hAoCCYEAyWhnd+O1Y6/z5Vi0v5/Vndn/vJl5/9npvJ3NzmwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJFUpkulsSTm8uriqXRzlel6bb7P9O7yfrlm0Ge9EUnrvxgejv3tpv1fWJ18T+vhSBxsPzsYw63BcFzae89dj35+cKA7f5+EbtThzScN9T5JIt5sJXXhzPLy0svbkMht9L2fd0aGexp3RfTZvv9aaT3OZtW8Ucvny7NZmjdq6dTkZOnBkzONdCafyxqnG81sPq3Us3KzVk+PVY6nY1NTE2k2erq2WJ2dLs9l3cZHHhgvlSbTJ0YXsnK9Uas++MRoo3Iyn5vLq7NFzHjptWjFPNLaEZ/Mm2kzK8+n6bnzy0sTW/WuFTS2pmX3mo4dvP+uj1/96O/nl1o75GYLSTo75vjY2Pj42OTDUw8/UioNjpfG1zaU1okrETEQ0YrYlp2WnbV3g7bBzh5z1YSIlTtvzcEbbtJAp/7HXORRjcU4FWmkMVA8rv4NRSWmox61mG89/8PQuulpdA6Q3fr/pQf/8rt+6+2t/90qv3918oEo6v+h9rNDm9X/q7K4/r+xO681svp+O5vetlfi9bgUF+JMLMdyLMXLN5LDrvVL3ca/gVu7vNnIohp5NKIWecxHuWhJOy1pTMVkTEYpno6TMRN7Io2ZyGMusmjE6WhEM7Jij6pEPbIoRzNqUY80jkUljrdenZiKqZiINLIYjdNRi8WoxmxMR7lYyrk4X2z3iXV53fPtZ3723O8/fqc1fiVorE9HktabuVbQ3/oEXVXur6P+dyPU/0+b4c4x61rjb+nxG27GSlH/B699hv/8ZDvTAQAAALZBUnz6nkTEUNxbjM3kc9lTO50WAAAAcAsVX9s72BoMtcbujaR1/l/aIPLD254bAAAAcGskxTV2SUSMxH3tse7lUht9CAAAAAD8Hyr+/f9QazAS8UbR4PwfAAAAPmW+s9k99j/a1bnHbmNhd/KLv0a9PpRcXrkyX/niHe2RzuBrV6Y0Zw4k+zoLKQaTg5f2JhExWMkOJt27X/53d3v4SfF4YPUGhJvd6z8pElg4dX9ysbxRAtE/geJZfD8Ot2MOn20Pz3antNcyMpPPZaOV2tyjY0nnw5Hmq8+f/2YU3f9udX5fEufOLy+NPvvC8tkil8utpVy+2Ln7cdKdK6J9QUWfXFY6WyDu3bjHQ8WFGJ31jrTXW+rt/0B79oH+/U961/lWHGnHHBlpD0fW9n+4tc6x0UfHolzeN9DMTjVfXenpfSeLsXbP31zT8+t4Fd6Ko+2Yo8eOtgcbZDG+Jovnr85ivHf7X9u2uOYs3jn8xql//LqWZBNbZTFxk1kA7JRzxV1/VqvQnqIK/XulrVXQ1tXdPd05r+cod271XUZ3/p5aNxhXVff0Rqr7W3GsHXOs/X5i8MAGdaW0wRH9xfMv/qZzRH/ovR/9+OuHfvvBurp+HVm8F8fbMZ1B3P2rTWpsfeXO5BtPra2q77bmeHfT9TbmxpO4o7URix8fiksPnL945rml55aeHx+fmCw9VCo9PB5DxVuFzmCTTFUegM+2Pr+x0yq9yQffuhK62a/wJA9tcVZ995WvFIzGs/FCLMfZOFFcbRAR92281JGeryGc2OKsdaTnF15ObHFuuRo7vj5299Ek9kbEBrETPVvsiz8sBv/cphcEAG6DI1vU4aT7DuG1z3XmWBdxR5Kc2OK8e20tP94+d+2eHcfmtXwjX9nm7QEAnwVZ/ZNkpPl2Uq/nC0+PTU2NlZsns7ReqzyZ1vPp2SzNq82sXjlZrs5m6UK91qxVuh8dT2eNtLG4sFCrN9OZWj1dqDXyU8Uvv6edn35vZPPlajOvNBbmsnIjSyu1arNcaabTeaOSLiw+Ppc3Tmb1YubGQlbJZ/JKuZnXqmmjtlivZKNp2siynsB8Oqs285k8G0rzarpQz+fL9csRMbc4n6XTWaNSzxeatfYCu+vKqzO1+nyx2NEi7Zd6u//nndjmALDTXnn90oUzy8tLL9/YyB+vJXin+wgArLVBld6zowkBAAAAAAAAAAAAAABXufpyvVbrmpbh6H+R31Dc8OWDr+yOm7n68NM38uX32y/LzS/wvpduZjl7YnnXasuuzs6y89vnukeeeeyxC6styWDv5n38jf0n/5RFt3d9lrPx/ykbXer69r6IXT/9Qbvlq5sEJ4O3uKcfRsQNzL6S9Im5/cciAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjK/wIAAP//BPFR5w==") name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0, 0x600) syz_open_dev$loop(&(0x7f0000000040), 0xffffffffffffffff, 0xea80) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="aa", 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x28) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = fsopen(&(0x7f00000003c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000280)='\xebU\x95\xa4i\xea`\xe0[\x9a\x84\x11\xc9&R:\xe9\xea\xec\xe05@b\x1f\xab\xb7\xe6\xd4\x18\xe7D@\xf5\xb2\xb4\xe8i$\x038\x99\xfb;\xbeR\xbf\xc2\r\x13\xf0\xf0\xec\x94\xad\nA\xee>\xb3i4\\\xc8\xd7 \x8d\xe0D\x953|) \xd8p\x12\x11\x81\x7f\x93\a\xfb!\x83\xc2\xd8\xe4\x98\xae\xb7\f\x0fR\xd3\xad\xa5\xca\xd5\xc2\bv+\x9a\x94\xd0\x05\x8d\xef\x9f94>\xa5?\x9a\x11Et\xef\xea\xe9e\x81\'jB\xca\f\xccz\x15x\x1cn\xe4\xf3\xbd\xb4q{\xb33\xffM\x95Jm\x90\x00\x15\r\xc8R\xb4\xf89>\xb7\x1e\xe3\x99\x99_~\xdb\xdc\xfd\x0f\x8f\xfc\xe4\xa4\xe8\x03K\xea\xb2\x91H|EB\xfd2\x10atXE\xee\xf4\x13c\xb5u\x85w$\xd3}\x19\xe7n\xf9\xe7\x11@\xceB\xd7/\xde\x80F\xe0\xd0dI\xedfq]\xb1\xaa\x9b)\\o\xd1\xdcx\x06\x80\x9f\xb3\xcc\r\b\xcb\xb1\x1c\x03G\xe4\xf0H`\x0e\xe1\xc7\x13\x9e%J\xe6\xe2\xe6\xb4:\xa8\xf51~\xc5\x8a\xfe++s\x0f\xa9\x00\x00A\xb8\xf1\xdb', &(0x7f00000000c0)="8c", 0xff57) 485.781261ms ago: executing program 8 (id=581): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioprio_set$uid(0x3, 0x0, 0x0) 413.267283ms ago: executing program 2 (id=582): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000400)='cachefiles_read\x00', r2, 0x0, 0x2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) signalfd(r1, &(0x7f0000000380), 0x8) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0xfffffffe, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xa, 0xffe0}, {0xffff, 0x6}, {0xfff3, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x48801}, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000c0000000b30000007f"], 0x50) rseq(&(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x808, 0xffffffffffff97b9, 0x3}, 0x2}, 0x20, 0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_subtree(r7, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r8, &(0x7f0000000500)=ANY=[@ANYBLOB="2b63740000dcd599857d26a56d52b15e23f65ead7f42311781fbe4bf45622d62725a71bdb245d55380921876d8173be9aae7f9defd356c41614a29fe470a56c9c2c83522f0f816f2935510ee1cb997f9ce6f87ce93726dde5c61ff1d9a535d7596bf3d79fb06e12e0b03e432c8964703047a33badc9bbd449ec22137f98cd1ffe18e8b2fc54376aac75b07837bb1e1551dfa"], 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x1b, 0x1a, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000080000000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018400000fdffffff0000000000000000183a000003000000000000000000000018360000020000000000000000000000f19600f00e00000018440000fbffffff000000000000000081964ff90500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb70363730a27df715a7800000100000085000000820000009500000000000800"], &(0x7f0000000840)='syzkaller\x00', 0x2, 0xa3, &(0x7f0000000680)=""/163, 0x40f00, 0x2e, '\x00', 0x0, @fallback=0x16, r7, 0x8, &(0x7f0000000980)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000dc0)=[r5, 0xffffffffffffffff], &(0x7f0000000e00)=[{0x3, 0x1, 0xf, 0xd}, {0x2, 0x2, 0x5, 0x6}, {0x0, 0x2, 0x0, 0x3}, {0x5, 0x1, 0xb}, {0x1, 0x1, 0xf, 0x4}, {0x3, 0x1, 0x7, 0x4}, {0x4, 0x5, 0x5}, {0x4, 0x3, 0xe, 0x2}], 0x10, 0x50}, 0x94) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="18200000", @ANYRES16=r9, @ANYBLOB="01002cbd7000fedbdf251100000004000980"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c30000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r11, 0x0, 0xb}, 0x18) syz_io_uring_setup(0x14f5, &(0x7f00000005c0)={0x0, 0xb1b2, 0x40, 0x3, 0x307, 0x0, r2}, &(0x7f0000000040), &(0x7f0000000180)) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r12) 365.297393ms ago: executing program 2 (id=583): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = epoll_create1(0x0) socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x48) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) dup3(r2, r0, 0x80000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x5, '\x00', 0x0, r1, 0x1, 0x2, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1c, 0x17, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa03, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x7e}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x9}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @alu={0x7, 0x1, 0x5, 0x2, 0x5, 0xffffffffffffffc0, 0xffffffffffffffff}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @jmp={0x5, 0x0, 0x6, 0x2, 0x0, 0xfffffffffffffff4, 0x10}, @map_val={0x18, 0x1, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x73d5}, @alu={0x7, 0x0, 0x0, 0x8, 0x4, 0x4, 0x4}]}, &(0x7f0000000100)='syzkaller\x00', 0xf, 0x1000, &(0x7f0000002000)=""/4096, 0x41000, 0x40, '\x00', 0x0, @fallback=0xb3e76bb6b6e93074, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x1, 0x9, 0xa, 0x10001}, 0x10, 0x0, 0xffffffffffffffff, 0x1, &(0x7f0000000580), &(0x7f00000005c0)=[{0x4, 0x1, 0xb, 0x8}], 0x10, 0x9}, 0x94) r5 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r5, 0x110, 0x2, 0x0, 0x5392f5b1) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100"/253], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r6, 0xc0404806, &(0x7f0000000440)) close_range(r3, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="b70700000000000063017d0a0000000007000000000000009500000001000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195}, 0x23) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000003800)=@newtaction={0xcf8, 0x30, 0x12f, 0x0, 0x0, {}, [{0xce4, 0x1, [@m_police={0xce0, 0x1, 0x0, 0x0, {{0xb}, {0xcb4, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE64={0xc, 0x8, 0x16}, @TCA_POLICE_RESULT={0x8, 0x5, 0xa}, @TCA_POLICE_TBF={0x3c, 0x1, {0xdc, 0x10000000, 0x7fffffff, 0x5, 0xfffffffd, {0x6, 0x2, 0x1, 0x401, 0x1, 0xc}, {0x9a, 0x0, 0x40, 0x5, 0x400}, 0x5, 0x0, 0x81}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe8d0, 0x101, 0x8, 0x200, 0x4, 0x7f, 0x3, 0xffffffff, 0x3, 0x80000001, 0x8000000b, 0x1, 0xfffff0c2, 0x7, 0xa042, 0xfffffc21, 0xffff7fff, 0x4, 0x4, 0x400, 0x8, 0x7, 0x5d3b2fc3, 0x87f, 0x7ff, 0x5, 0x5, 0x2, 0x1, 0xa0, 0xb, 0xf14, 0x2, 0x7f, 0x7, 0x1, 0x1, 0x5, 0x1, 0x9, 0x4, 0x1, 0xc, 0x8001, 0x8, 0x40000000, 0x5, 0x0, 0x40, 0x1, 0x5, 0x1, 0x9, 0x1ff, 0x0, 0x9, 0x426, 0x6, 0x7fff, 0xffffffff, 0x3a, 0x5, 0x9, 0x3feb, 0x0, 0x5, 0xeb5, 0x1ff, 0x5, 0x8, 0x0, 0x0, 0x7, 0x4, 0x2597, 0x9, 0x7, 0x4, 0xb8, 0xcb, 0xf, 0x0, 0x2, 0x4, 0x0, 0x27d, 0xc2c, 0x6, 0x1, 0x6, 0x4, 0x0, 0x8, 0x9, 0x10001, 0x3, 0x6, 0x2, 0xc, 0x6, 0x9, 0x3, 0x1c1, 0x3, 0x9, 0x4, 0x3, 0xfffffffa, 0x6, 0x4, 0xa21, 0xffff, 0x3ff, 0x0, 0x8, 0x355a, 0x1, 0x6, 0xffffff60, 0xee, 0x1000, 0x6, 0xfffffffb, 0x2, 0x7, 0x0, 0x2, 0xe0, 0x7f, 0xea50, 0x5, 0x2, 0x1000, 0x8, 0x0, 0x8, 0x1000, 0x7, 0x5, 0xfffffffa, 0x200, 0x7ff, 0xfffffff9, 0xfffffffd, 0x6, 0x1000, 0x8, 0x7ff, 0x81, 0x401, 0xe, 0x0, 0x8, 0x5, 0xfff, 0x1f2, 0x24000, 0x7, 0x8001, 0x5, 0x6, 0x7ff, 0x7, 0x1b, 0x3a03, 0x7, 0xffffffff, 0x2, 0x3, 0x9, 0x3, 0x171751e3, 0x5, 0x6, 0x54, 0xfffffffb, 0xfa7, 0x7, 0x60, 0x1, 0x10, 0xcc0c, 0xa, 0x62, 0x8, 0x120000, 0x8, 0x4, 0x1, 0x8001, 0xd, 0x5, 0x5, 0x5c, 0x4, 0x67bd, 0x3866, 0x9, 0xed1, 0x8, 0x5, 0x1, 0x2, 0x2, 0x2, 0x2, 0xb, 0x6, 0xb0c, 0x7, 0x5, 0x5c3b, 0x6, 0xb21, 0x40, 0x9, 0x3, 0x8, 0x3, 0x40000000, 0x2, 0x8, 0x4, 0xfff, 0x80000000, 0x5, 0x2b, 0x0, 0x3, 0x8, 0x9, 0x6, 0x400, 0x10e, 0x7, 0x101, 0x41a, 0x6, 0x7, 0xbae5, 0x0, 0x8, 0x6, 0x401, 0xfffffffe, 0xa, 0x0, 0x0, 0x1, 0xfffffff8, 0x9, 0xf87, 0x1, 0x9, 0x5, 0x9]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_RATE={0x404, 0x2, [0x400, 0x72aad88, 0x8ec3, 0x0, 0x1, 0x4, 0xfffffffe, 0x2000000, 0x1ff, 0xfbd, 0x1, 0xb, 0x7, 0x5, 0x7a, 0x4c7c, 0x2782, 0x2, 0x1, 0x1, 0xfffffff3, 0x1ff, 0x3, 0x0, 0xffff, 0x8, 0xfffffbff, 0x9, 0x0, 0x3, 0x7ffe, 0x6, 0x9, 0x580, 0x8b1, 0x6, 0x3, 0x717, 0x8, 0x4, 0x450a, 0x0, 0x2, 0x7, 0x5, 0x4, 0x3, 0x8000, 0x0, 0x5, 0x1, 0x7fffffff, 0x5, 0x793, 0x6, 0x4, 0xfffffffc, 0x9, 0x8, 0x9, 0x5, 0xd0, 0x0, 0x311, 0x23e8, 0xd6de, 0x9, 0x5, 0xc, 0x7, 0x18, 0xa, 0x1, 0x8, 0x1, 0x400, 0x3e, 0x1, 0xf, 0x81, 0x3, 0x6, 0x7, 0x4, 0xb6a5, 0x37a, 0x6, 0x9, 0x0, 0x80000000, 0xbd72, 0x6, 0x5184, 0x1, 0x30000000, 0x9, 0x526, 0x3, 0x6c18, 0x6, 0x5, 0x1, 0x7, 0x3, 0xe, 0x3, 0x9, 0x4c8a, 0x1000, 0x100000, 0x0, 0x3, 0x14a, 0x5, 0x56ad2c07, 0x7fffffff, 0x3ff, 0xfffffbff, 0x8, 0x6, 0x6, 0x6658, 0x10001, 0xe, 0x4, 0x1, 0x10000, 0xfffffbff, 0x200, 0x8, 0x0, 0x3ff, 0x8001, 0x5, 0x6, 0x8000, 0xffff, 0x0, 0x4c05390b, 0x9, 0x8000, 0x0, 0x3, 0x0, 0x2, 0x9, 0x9de, 0xfff, 0x0, 0x5, 0x80000001, 0x1000, 0x5, 0x1, 0x3, 0x7, 0x7, 0x3, 0x2, 0x1, 0x3, 0xff, 0xd3, 0x10000, 0x73, 0x1800000, 0x8, 0x0, 0x3, 0x2, 0x2, 0x0, 0x9, 0x6f32, 0xc, 0x7f, 0x5, 0xc, 0x883, 0x8, 0xc, 0x4, 0x5, 0x0, 0x7, 0x4, 0x3ff, 0x1, 0x2, 0x8, 0x9, 0x2, 0x4, 0xfffffffd, 0x7, 0x8, 0x5e4a, 0x8, 0x9, 0x800, 0x6, 0x7, 0xffff, 0x8, 0x0, 0x8001, 0xde, 0xc, 0x8ef, 0xffffffff, 0x9, 0x81, 0x0, 0x3, 0x0, 0x3, 0x8001, 0x0, 0x7, 0x4, 0x9, 0x9, 0x6, 0x1, 0x0, 0xfffffff8, 0x1ff, 0x80000000, 0x71, 0x8, 0x4, 0x80000000, 0x1eea, 0x81, 0x200, 0x10000, 0x4, 0x7ff, 0x7, 0xfffffff8, 0xa, 0x81, 0x2, 0x7, 0x8, 0x5, 0x640, 0x7, 0x947, 0x7, 0x0, 0x5, 0x1, 0x6, 0x8, 0x7fffffff]}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe7c1, 0x9, 0x2, 0x5e9, 0x2, 0x36d, 0x2, 0x1, 0x101, 0x5, 0x5, 0x7ff, 0x7, 0x1, 0x0, 0x3, 0xc0a9, 0x7, 0x0, 0x10000, 0x7f, 0x8000, 0xfffffffd, 0x8, 0x4b8, 0x81d9, 0x3, 0x2401, 0x81, 0x30f, 0x765, 0x369, 0x2, 0x6, 0x1ff, 0xe, 0x2, 0x7, 0xf, 0x3, 0x6, 0x8, 0xd, 0x3ff, 0x1, 0x30000, 0x24, 0x9, 0x2, 0x5c2c, 0x8, 0x4, 0x10, 0x0, 0x5, 0x100, 0x10001, 0x2, 0x400, 0x4, 0x400, 0x6e0f1d14, 0x2, 0x5, 0x5, 0xd90d, 0x3, 0x3, 0x2, 0xa, 0x4, 0x2, 0x4, 0x4fbe, 0x1, 0x4, 0x5, 0x7, 0xffff, 0x7, 0xa, 0x2, 0xaf8, 0x1, 0x3ff, 0x9, 0x10001, 0x5529, 0x9, 0x80, 0x7, 0xd, 0x5, 0x2, 0xffffffff, 0x6, 0x81, 0xdbb, 0xa1b, 0x2, 0x2, 0x2, 0x3, 0x101, 0x10, 0x3, 0x800, 0x80000000, 0x3, 0x5055, 0x3, 0x8, 0x4a47, 0x0, 0x6, 0x80000000, 0x7, 0xe, 0x100, 0x8001, 0x4, 0x8, 0x2, 0x8, 0x5, 0x6, 0x8000, 0x3ff, 0x6, 0x7fffffff, 0x1, 0xfffffff7, 0x8, 0x3ff, 0xffffffff, 0x1, 0x4, 0x9, 0xff, 0x7ff, 0xc, 0x6, 0xfffffbf2, 0x80000000, 0xa, 0x8, 0x400, 0x1, 0x2, 0x1, 0xe, 0x4, 0x0, 0x8, 0x6, 0x3, 0xe8, 0x58d, 0x5, 0x6, 0x63, 0xfffffffd, 0x6fe55df5, 0x3, 0x8001, 0x2f, 0x2, 0x1, 0x40, 0x7ff, 0x6, 0x4, 0x5, 0x5, 0x5, 0x3, 0xffff0001, 0x1d, 0x8, 0x0, 0x8, 0x3, 0x2, 0xb, 0xaf, 0x27ff, 0x100, 0x5, 0x25, 0x8e7e, 0x7fff, 0x3, 0x6, 0x5, 0x80000001, 0xe, 0xeaaf, 0x7, 0xb, 0x1, 0x7f, 0x4, 0x5, 0x1, 0xffff, 0x1, 0x6, 0x8, 0x3, 0x4, 0x100000cb, 0x7ae3, 0x7, 0x5, 0x0, 0xad980, 0x9, 0x6, 0x3, 0x5, 0x3, 0x7, 0xc, 0x3ff, 0x5, 0x1, 0x4, 0x1, 0x7, 0x4, 0x8, 0x3, 0x4, 0xc871, 0xff, 0x10000, 0x80, 0xffff, 0x401, 0xfffffffc, 0x1ff, 0x8, 0x7, 0xba, 0x8001, 0xd96f, 0x1, 0xa, 0x2, 0xfffffff8, 0x4, 0x9, 0x3, 0x8000, 0xb, 0xe]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffff, 0x0, 0x1, 0x9, 0x100, {0x4, 0x2, 0x7, 0x2, 0x8000, 0x3}, {0x8, 0x0, 0x7fff, 0x8, 0x1, 0x100}, 0x2, 0x10, 0xe723}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0xcf8}}, 0xc0) stat(&(0x7f0000000cc0)='./file0\x00', &(0x7f0000001c80)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) 110.064458ms ago: executing program 2 (id=584): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) munlockall() 70.88296ms ago: executing program 2 (id=585): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x16000000, 0x6}, 0x4000, 0x10000, 0x0, 0x1, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20010006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000940)={[{@barrier_val}, {@resuid}, {@block_validity}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000180)="$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") openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) 0s ago: executing program 4 (id=586): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_io_uring_setup(0x684e, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1}) io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 44.216155][ T3545] netlink: 4 bytes leftover after parsing attributes in process `syz.2.25'. [ 44.287315][ T3551] loop3: detected capacity change from 0 to 764 [ 44.497006][ T3395] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 44.526615][ T3395] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 44.576903][ T3577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30'. [ 44.642981][ T3569] loop0: detected capacity change from 0 to 512 [ 44.646940][ T3575] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.656837][ T3575] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.722429][ T3569] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 44.752864][ T3569] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 44.833190][ T108] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.854840][ T3585] lo speed is unknown, defaulting to 1000 [ 44.878746][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.937592][ T3597] loop0: detected capacity change from 0 to 1024 [ 44.947938][ T108] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.957526][ T3585] lo speed is unknown, defaulting to 1000 [ 44.963702][ T35] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.974199][ T3585] lo speed is unknown, defaulting to 1000 [ 44.975414][ T35] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.983880][ T3585] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 44.999558][ T3597] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.000089][ T3585] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 45.055609][ T3597] FAULT_INJECTION: forcing a failure. [ 45.055609][ T3597] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 45.069177][ T3597] CPU: 1 UID: 0 PID: 3597 Comm: syz.0.36 Not tainted syzkaller #0 PREEMPT(voluntary) [ 45.069212][ T3597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 45.069226][ T3597] Call Trace: [ 45.069232][ T3597] [ 45.069241][ T3597] __dump_stack+0x1d/0x30 [ 45.069368][ T3597] dump_stack_lvl+0xe8/0x140 [ 45.069406][ T3597] dump_stack+0x15/0x1b [ 45.069427][ T3597] should_fail_ex+0x265/0x280 [ 45.069454][ T3597] should_fail+0xb/0x20 [ 45.069475][ T3597] should_fail_usercopy+0x1a/0x20 [ 45.069557][ T3597] strncpy_from_user+0x25/0x230 [ 45.069599][ T3597] ? kmem_cache_alloc_noprof+0x186/0x310 [ 45.069709][ T3597] ? getname_flags+0x80/0x3b0 [ 45.069826][ T3597] getname_flags+0xae/0x3b0 [ 45.069915][ T3597] user_path_at+0x28/0x130 [ 45.069948][ T3597] __se_sys_mount+0x25b/0x2e0 [ 45.069975][ T3597] ? fput+0x8f/0xc0 [ 45.070044][ T3597] __x64_sys_mount+0x67/0x80 [ 45.070122][ T3597] x64_sys_call+0x2b4d/0x2ff0 [ 45.070151][ T3597] do_syscall_64+0xd2/0x200 [ 45.070214][ T3597] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 45.070247][ T3597] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 45.070284][ T3597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 45.070374][ T3597] RIP: 0033:0x7f8597beeec9 [ 45.070395][ T3597] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.070418][ T3597] RSP: 002b:00007f859664f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 45.070442][ T3597] RAX: ffffffffffffffda RBX: 00007f8597e45fa0 RCX: 00007f8597beeec9 [ 45.070459][ T3597] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000000 [ 45.070475][ T3597] RBP: 00007f859664f090 R08: 0000000000000000 R09: 0000000000000000 [ 45.070490][ T3597] R10: 0000000002390024 R11: 0000000000000246 R12: 0000000000000001 [ 45.070506][ T3597] R13: 00007f8597e46038 R14: 00007f8597e45fa0 R15: 00007ffde85d3bc8 [ 45.070578][ T3597] [ 45.308072][ T3585] lo speed is unknown, defaulting to 1000 [ 45.317676][ T3585] lo speed is unknown, defaulting to 1000 [ 45.324835][ T3598] loop2: detected capacity change from 0 to 2048 [ 45.359852][ T3585] lo speed is unknown, defaulting to 1000 [ 45.366975][ T3585] lo speed is unknown, defaulting to 1000 [ 45.373993][ T3585] lo speed is unknown, defaulting to 1000 [ 45.416853][ T37] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 45.418005][ T37] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 45.462190][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.463110][ T3585] lo speed is unknown, defaulting to 1000 [ 45.623521][ T1036] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 45.637198][ T1036] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz1] on syz0 [ 45.714579][ T3625] loop1: detected capacity change from 0 to 764 [ 45.873003][ T3620] lo speed is unknown, defaulting to 1000 [ 46.090607][ T3632] lo speed is unknown, defaulting to 1000 [ 46.353005][ T3641] loop0: detected capacity change from 0 to 764 [ 46.381027][ T3642] loop3: detected capacity change from 0 to 764 [ 46.763721][ T29] kauditd_printk_skb: 533 callbacks suppressed [ 46.763739][ T29] audit: type=1326 audit(1759092298.117:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3653 comm="syz.4.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2815e6eec9 code=0x7ffc0000 [ 46.795156][ T29] audit: type=1326 audit(1759092298.117:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3653 comm="syz.4.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f2815e6eec9 code=0x7ffc0000 [ 46.803099][ T1036] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 46.819225][ T29] audit: type=1326 audit(1759092298.117:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3653 comm="syz.4.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2815e6eec9 code=0x7ffc0000 [ 46.850148][ T29] audit: type=1326 audit(1759092298.117:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3653 comm="syz.4.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2815e6eec9 code=0x7ffc0000 [ 46.886379][ T1036] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 46.953566][ T29] audit: type=1326 audit(1759092298.117:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3653 comm="syz.4.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2815e6eec9 code=0x7ffc0000 [ 46.978391][ T29] audit: type=1326 audit(1759092298.117:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3653 comm="syz.4.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2815e6eec9 code=0x7ffc0000 [ 47.002057][ T29] audit: type=1326 audit(1759092298.117:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3653 comm="syz.4.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2815e6eec9 code=0x7ffc0000 [ 47.025542][ T29] audit: type=1326 audit(1759092298.117:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3653 comm="syz.4.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2815e6eec9 code=0x7ffc0000 [ 47.050261][ T29] audit: type=1326 audit(1759092298.117:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3653 comm="syz.4.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2815e6eec9 code=0x7ffc0000 [ 47.074889][ T29] audit: type=1326 audit(1759092298.117:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3653 comm="syz.4.53" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2815e6eec9 code=0x7ffc0000 [ 47.133672][ T3638] lo speed is unknown, defaulting to 1000 [ 47.196059][ T3640] lo speed is unknown, defaulting to 1000 [ 47.567715][ T3668] Invalid logical block size (6) [ 47.603414][ T3670] netlink: 'syz.2.59': attribute type 4 has an invalid length. [ 47.612115][ T3670] netlink: 'syz.2.59': attribute type 4 has an invalid length. [ 47.631934][ T3670] syz.2.59 (3670) used greatest stack depth: 10432 bytes left [ 48.006303][ T3690] netlink: 'syz.2.68': attribute type 4 has an invalid length. [ 48.047308][ T3690] netlink: 'syz.2.68': attribute type 4 has an invalid length. [ 48.058729][ T3692] Invalid logical block size (6) [ 48.146996][ T1036] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 48.160011][ T1036] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 48.255184][ T3712] loop0: detected capacity change from 0 to 764 [ 48.411209][ T3717] netlink: 'syz.4.77': attribute type 4 has an invalid length. [ 48.416727][ T3702] lo speed is unknown, defaulting to 1000 [ 48.432851][ T1036] lo speed is unknown, defaulting to 1000 [ 48.438783][ T1036] syz0: Port: 1 Link DOWN [ 48.444994][ T3717] netlink: 'syz.4.77': attribute type 4 has an invalid length. [ 48.487944][ T3723] loop3: detected capacity change from 0 to 512 [ 48.507114][ T3723] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.512007][ T2953] lo speed is unknown, defaulting to 1000 [ 48.526339][ T2953] syz0: Port: 1 Link ACTIVE [ 48.533215][ T3723] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.544605][ T3704] siw: device registration error -23 [ 48.602645][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.667477][ T3731] netlink: 176 bytes leftover after parsing attributes in process `syz.3.80'. [ 48.698523][ T3731] loop3: detected capacity change from 0 to 164 [ 48.723138][ T3731] process 'syz.3.80' launched '/dev/fd/4' with NULL argv: empty string added [ 48.749258][ T3731] syz.3.80: attempt to access beyond end of device [ 48.749258][ T3731] loop3: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 48.771239][ T3731] syz.3.80: attempt to access beyond end of device [ 48.771239][ T3731] loop3: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 48.786461][ T3731] netlink: 'syz.3.80': attribute type 4 has an invalid length. [ 48.828109][ T3731] netlink: 'syz.3.80': attribute type 4 has an invalid length. [ 48.994238][ T3744] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=13 sclass=netlink_route_socket pid=3744 comm=syz.1.84 [ 49.018513][ T3712] syz.0.74 (3712) used greatest stack depth: 10336 bytes left [ 49.068894][ T3746] Invalid logical block size (6) [ 49.122664][ T3748] loop1: detected capacity change from 0 to 2048 [ 49.174432][ T3748] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.234065][ T3300] EXT4-fs error (device loop1): ext4_find_extent:939: inode #2: comm syz-executor: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 49.262275][ T3300] EXT4-fs (loop1): Remounting filesystem read-only [ 49.321566][ T1036] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 49.342271][ T1036] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 49.460231][ T3757] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.474371][ T31] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.554949][ T3775] netlink: 12 bytes leftover after parsing attributes in process `syz.4.97'. [ 49.573048][ T31] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.573954][ T3763] siw: device registration error -23 [ 49.635371][ T31] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.701885][ T3770] loop0: detected capacity change from 0 to 1024 [ 49.727704][ T3770] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 49.730649][ T31] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.739022][ T3770] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 49.761678][ T3770] JBD2: no valid journal superblock found [ 49.767562][ T3770] EXT4-fs (loop0): Could not load journal inode [ 49.807317][ T3792] loop4: detected capacity change from 0 to 764 [ 49.823243][ T3770] netlink: 32 bytes leftover after parsing attributes in process `syz.0.94'. [ 49.879413][ T3770] netlink: 32 bytes leftover after parsing attributes in process `syz.0.94'. [ 49.922686][ T3776] lo speed is unknown, defaulting to 1000 [ 49.931731][ T3773] sd 0:0:1:0: device reset [ 49.965230][ T31] bridge_slave_1: left allmulticast mode [ 49.971162][ T31] bridge_slave_1: left promiscuous mode [ 49.976933][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.052633][ T31] bridge_slave_0: left allmulticast mode [ 50.058542][ T31] bridge_slave_0: left promiscuous mode [ 50.064418][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.164276][ T3791] loop2: detected capacity change from 0 to 764 [ 50.300563][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.315932][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.326881][ T31] bond0 (unregistering): Released all slaves [ 50.447629][ T3827] loop0: detected capacity change from 0 to 764 [ 50.472609][ T3829] loop3: detected capacity change from 0 to 512 [ 50.483910][ T3786] lo speed is unknown, defaulting to 1000 [ 50.523339][ T3829] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.546194][ T3829] ext4 filesystem being mounted at /22/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.581990][ T3829] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.106: bg 0: block 289: padding at end of block bitmap is not set [ 50.606891][ T31] hsr_slave_0: left promiscuous mode [ 50.626738][ T31] hsr_slave_1: left promiscuous mode [ 50.654392][ T3841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.107'. [ 50.664732][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.672632][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.708117][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.715777][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.748180][ T31] veth1_macvtap: left promiscuous mode [ 50.753786][ T31] veth0_macvtap: left promiscuous mode [ 50.768345][ T31] veth1_vlan: left promiscuous mode [ 50.773896][ T31] veth0_vlan: left promiscuous mode [ 50.870898][ T31] team0 (unregistering): Port device team_slave_1 removed [ 50.885026][ T31] team0 (unregistering): Port device team_slave_0 removed [ 50.976832][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.021366][ T1036] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 51.052987][ T1036] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 51.223163][ T3776] chnl_net:caif_netlink_parms(): no params data found [ 51.337163][ T3869] siw: device registration error -23 [ 51.432420][ T3776] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.439855][ T3776] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.451827][ T3776] bridge_slave_0: entered allmulticast mode [ 51.458891][ T3776] bridge_slave_0: entered promiscuous mode [ 51.488054][ T3776] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.495906][ T3776] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.506928][ T3776] bridge_slave_1: entered allmulticast mode [ 51.514356][ T3776] bridge_slave_1: entered promiscuous mode [ 51.548157][ T3776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.580747][ T3776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.629299][ T3894] netlink: 'syz.0.113': attribute type 4 has an invalid length. [ 51.631563][ T3776] team0: Port device team_slave_0 added [ 51.645303][ T3776] team0: Port device team_slave_1 added [ 51.671324][ T3776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.678512][ T3776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.704759][ T3776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.719031][ T3776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.726135][ T3776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.752563][ T3776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.820647][ T3776] hsr_slave_0: entered promiscuous mode [ 51.837503][ T3776] hsr_slave_1: entered promiscuous mode [ 51.862372][ T29] kauditd_printk_skb: 697 callbacks suppressed [ 51.862422][ T29] audit: type=1326 audit(1759092303.217:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3908 comm="syz.0.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8597beeec9 code=0x7ffc0000 [ 51.915501][ T29] audit: type=1326 audit(1759092303.257:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3908 comm="syz.0.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8597beeec9 code=0x7ffc0000 [ 51.939183][ T29] audit: type=1326 audit(1759092303.257:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3908 comm="syz.0.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8597beeec9 code=0x7ffc0000 [ 51.962694][ T29] audit: type=1326 audit(1759092303.257:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3908 comm="syz.0.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8597beeec9 code=0x7ffc0000 [ 51.986549][ T29] audit: type=1326 audit(1759092303.257:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3908 comm="syz.0.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8597beeec9 code=0x7ffc0000 [ 52.010114][ T29] audit: type=1326 audit(1759092303.257:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3908 comm="syz.0.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8597beeec9 code=0x7ffc0000 [ 52.013759][ T3915] loop3: detected capacity change from 0 to 764 [ 52.034007][ T29] audit: type=1326 audit(1759092303.257:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3908 comm="syz.0.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8597beeec9 code=0x7ffc0000 [ 52.034047][ T29] audit: type=1326 audit(1759092303.257:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3908 comm="syz.0.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8597beeec9 code=0x7ffc0000 [ 52.088275][ T29] audit: type=1326 audit(1759092303.257:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3908 comm="syz.0.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8597beeec9 code=0x7ffc0000 [ 52.112242][ T29] audit: type=1326 audit(1759092303.257:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3908 comm="syz.0.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8597beeec9 code=0x7ffc0000 [ 52.149818][ T3917] netlink: 12 bytes leftover after parsing attributes in process `syz.2.117'. [ 52.225359][ T3925] loop0: detected capacity change from 0 to 164 [ 52.255239][ T3925] syz.0.120: attempt to access beyond end of device [ 52.255239][ T3925] loop0: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 52.271756][ T3922] lo speed is unknown, defaulting to 1000 [ 52.285599][ T3925] syz.0.120: attempt to access beyond end of device [ 52.285599][ T3925] loop0: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 52.306235][ T3925] netlink: 'syz.0.120': attribute type 4 has an invalid length. [ 52.373264][ T3776] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 52.384465][ T3776] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 52.429000][ T3776] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 52.448378][ T1036] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 52.456460][ T1036] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 52.476798][ T3776] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 52.608205][ T3776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.630164][ T3776] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.647582][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.654827][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.719969][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.727277][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.753877][ T3967] validate_nla: 2 callbacks suppressed [ 52.753892][ T3967] netlink: 'syz.4.134': attribute type 4 has an invalid length. [ 52.782631][ T3776] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 52.793085][ T3776] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 52.816165][ T1036] lo speed is unknown, defaulting to 1000 [ 52.822128][ T1036] syz0: Port: 1 Link DOWN [ 52.826676][ T3967] netlink: 'syz.4.134': attribute type 4 has an invalid length. [ 52.839946][ T1036] lo speed is unknown, defaulting to 1000 [ 52.845832][ T1036] syz0: Port: 1 Link ACTIVE [ 52.937794][ T3776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.946540][ T3980] netlink: 'syz.4.137': attribute type 4 has an invalid length. [ 52.958175][ T23] lo speed is unknown, defaulting to 1000 [ 52.964341][ T23] syz0: Port: 1 Link DOWN [ 53.025279][ T3968] loop0: detected capacity change from 0 to 764 [ 53.035875][ T3985] lo speed is unknown, defaulting to 1000 [ 53.251141][ T4002] loop4: detected capacity change from 0 to 764 [ 53.264960][ T4000] lo speed is unknown, defaulting to 1000 [ 53.372807][ T3995] lo speed is unknown, defaulting to 1000 [ 53.374065][ T3776] veth0_vlan: entered promiscuous mode [ 53.541171][ T3776] veth1_vlan: entered promiscuous mode [ 53.600807][ T4012] loop2: detected capacity change from 0 to 764 [ 53.695811][ T9] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 53.713954][ T9] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 53.886399][ T4011] lo speed is unknown, defaulting to 1000 [ 53.897229][ T3776] veth0_macvtap: entered promiscuous mode [ 54.000388][ T3776] veth1_macvtap: entered promiscuous mode [ 54.335885][ T3776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.367108][ T4023] lo speed is unknown, defaulting to 1000 [ 54.502659][ T3776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.524328][ T4025] lo speed is unknown, defaulting to 1000 [ 54.529075][ T3395] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 54.552165][ T3395] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 54.577672][ T51] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.607177][ T51] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.679980][ T51] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.719999][ T51] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.856535][ T4039] loop5: detected capacity change from 0 to 764 [ 54.879836][ T4042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.150'. [ 54.906537][ T4042] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 54.914150][ T4042] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 54.978927][ T4042] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 54.986469][ T4042] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 55.027222][ T4046] netlink: 'syz.3.151': attribute type 4 has an invalid length. [ 55.146279][ T4037] lo speed is unknown, defaulting to 1000 [ 55.160917][ T4051] loop2: detected capacity change from 0 to 512 [ 55.197958][ T4051] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 55.240540][ T4059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.156'. [ 55.250621][ T4051] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.295499][ T4055] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 55.319526][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.404934][ T37] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 55.428206][ T37] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 55.704165][ T3395] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 55.737008][ T3395] hid-generic 0000:0000:0000.000D: hidraw1: HID v0.00 Device [syz1] on syz0 [ 55.838184][ T4072] lo speed is unknown, defaulting to 1000 [ 56.087868][ T4085] netlink: 60 bytes leftover after parsing attributes in process `syz.2.157'. [ 56.100547][ T4062] netlink: 60 bytes leftover after parsing attributes in process `syz.2.157'. [ 56.165333][ T4087] loop0: detected capacity change from 0 to 764 [ 56.190946][ T4088] netlink: 'syz.4.164': attribute type 4 has an invalid length. [ 56.339336][ T4097] netlink: 'syz.2.167': attribute type 4 has an invalid length. [ 56.355607][ T4097] netlink: 'syz.2.167': attribute type 4 has an invalid length. [ 56.407650][ T4101] netlink: '+}[@': attribute type 1 has an invalid length. [ 56.415448][ T4101] netlink: 224 bytes leftover after parsing attributes in process `+}[@'. [ 56.493760][ T4084] lo speed is unknown, defaulting to 1000 [ 56.749858][ T4110] netlink: 8 bytes leftover after parsing attributes in process `syz.5.171'. [ 56.760566][ T4110] netlink: 8 bytes leftover after parsing attributes in process `syz.5.171'. [ 56.808758][ T3388] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 56.823699][ T3388] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 56.842360][ T4113] fido_id[4113]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 56.929200][ T29] kauditd_printk_skb: 758 callbacks suppressed [ 56.929220][ T29] audit: type=1326 audit(1759092308.287:2108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.5.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02f02eec9 code=0x7ffc0000 [ 56.959968][ T29] audit: type=1326 audit(1759092308.317:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.5.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02f02eec9 code=0x7ffc0000 [ 56.986481][ T29] audit: type=1326 audit(1759092308.317:2110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.5.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fd02f02eec9 code=0x7ffc0000 [ 57.011088][ T29] audit: type=1326 audit(1759092308.317:2111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.5.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02f02eec9 code=0x7ffc0000 [ 57.035925][ T29] audit: type=1326 audit(1759092308.317:2112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.5.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02f02eec9 code=0x7ffc0000 [ 57.060137][ T29] audit: type=1326 audit(1759092308.337:2113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4114 comm="syz.5.173" exe="/root/syz-executor" sig=0 arch=c000003e syscall=207 compat=0 ip=0x7fd02f02eec9 code=0x7ffc0000 [ 57.083873][ T3388] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 57.098626][ T3388] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 57.126799][ T4123] syz.0.174 uses obsolete (PF_INET,SOCK_PACKET) [ 57.147185][ T29] audit: type=1326 audit(1759092308.427:2114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4118 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84de28eec9 code=0x7ffc0000 [ 57.152384][ T4125] netlink: 'syz.2.176': attribute type 4 has an invalid length. [ 57.171173][ T29] audit: type=1326 audit(1759092308.427:2115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4118 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84de28eec9 code=0x7ffc0000 [ 57.203227][ T29] audit: type=1326 audit(1759092308.427:2116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4118 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f84de28eec9 code=0x7ffc0000 [ 57.228560][ T29] audit: type=1326 audit(1759092308.427:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4118 comm="syz.3.175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84de28eec9 code=0x7ffc0000 [ 57.347037][ T4131] serio: Serial port ptm1 [ 57.466043][ T4139] lo speed is unknown, defaulting to 1000 [ 57.667161][ T37] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 57.675804][ T37] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 57.680106][ T4149] netlink: 60 bytes leftover after parsing attributes in process `syz.2.177'. [ 57.698300][ T4127] netlink: 60 bytes leftover after parsing attributes in process `syz.2.177'. [ 57.753940][ T4152] fido_id[4152]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 57.785264][ T4155] netlink: 4 bytes leftover after parsing attributes in process `syz.5.185'. [ 57.916542][ T4165] loop5: detected capacity change from 0 to 764 [ 57.953082][ T3388] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 57.970081][ T3388] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz1] on syz0 [ 58.088202][ T4158] lo speed is unknown, defaulting to 1000 [ 58.205838][ T4174] netlink: 'syz.4.189': attribute type 4 has an invalid length. [ 58.238019][ T4167] siw: device registration error -23 [ 58.376670][ T3388] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 58.405612][ T3388] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 58.429740][ T37] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 58.464972][ T37] hid-generic 0000:0000:0000.0013: hidraw1: HID v0.00 Device [syz1] on syz0 [ 58.508155][ T4187] fido_id[4187]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 58.543809][ T4189] FAULT_INJECTION: forcing a failure. [ 58.543809][ T4189] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 58.557459][ T4189] CPU: 0 UID: 0 PID: 4189 Comm: syz.2.195 Not tainted syzkaller #0 PREEMPT(voluntary) [ 58.557486][ T4189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 58.557568][ T4189] Call Trace: [ 58.557575][ T4189] [ 58.557585][ T4189] __dump_stack+0x1d/0x30 [ 58.557617][ T4189] dump_stack_lvl+0xe8/0x140 [ 58.557643][ T4189] dump_stack+0x15/0x1b [ 58.557665][ T4189] should_fail_ex+0x265/0x280 [ 58.557770][ T4189] should_fail_alloc_page+0xf2/0x100 [ 58.557808][ T4189] __alloc_frozen_pages_noprof+0xff/0x360 [ 58.557860][ T4189] alloc_pages_mpol+0xb3/0x250 [ 58.557957][ T4189] alloc_pages_noprof+0x90/0x130 [ 58.558001][ T4189] __pud_alloc+0x47/0x4c0 [ 58.558070][ T4189] handle_mm_fault+0x1882/0x2c20 [ 58.558098][ T4189] ? __rcu_read_unlock+0x4f/0x70 [ 58.558139][ T4189] do_user_addr_fault+0x3fe/0x1090 [ 58.558196][ T4189] ? kstrtouint_from_user+0x9f/0xf0 [ 58.558232][ T4189] exc_page_fault+0x62/0xa0 [ 58.558282][ T4189] asm_exc_page_fault+0x26/0x30 [ 58.558330][ T4189] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 58.558362][ T4189] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 cd f6 01 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 58.558384][ T4189] RSP: 0018:ffffc900101d3e48 EFLAGS: 00050212 [ 58.558405][ T4189] RAX: 0000000068d99e55 RBX: 0000000000000010 RCX: 0000000000000010 [ 58.558422][ T4189] RDX: 0000000000000000 RSI: ffffc900101d3e80 RDI: 0000200000000080 [ 58.558439][ T4189] RBP: 0000000000000000 R08: 00000000000002a7 R09: 0000000000000000 [ 58.558455][ T4189] R10: 0001c900101d3e80 R11: 0001c900101d3e8f R12: 0000200000000090 [ 58.558548][ T4189] R13: 00007ffffffff000 R14: 0000200000000080 R15: ffffc900101d3e80 [ 58.558574][ T4189] _copy_to_user+0x7c/0xa0 [ 58.558636][ T4189] put_timespec64+0x63/0xb0 [ 58.558669][ T4189] __x64_sys_clock_gettime+0x13d/0x180 [ 58.558714][ T4189] x64_sys_call+0x2a71/0x2ff0 [ 58.558805][ T4189] do_syscall_64+0xd2/0x200 [ 58.558845][ T4189] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 58.558915][ T4189] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 58.558954][ T4189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.558981][ T4189] RIP: 0033:0x7f409ab0eec9 [ 58.559001][ T4189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.559024][ T4189] RSP: 002b:00007f409956f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e4 [ 58.559071][ T4189] RAX: ffffffffffffffda RBX: 00007f409ad65fa0 RCX: 00007f409ab0eec9 [ 58.559085][ T4189] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000000 [ 58.559101][ T4189] RBP: 00007f409956f090 R08: 0000000000000000 R09: 0000000000000000 [ 58.559117][ T4189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.559164][ T4189] R13: 00007f409ad66038 R14: 00007f409ad65fa0 R15: 00007ffd81fefce8 [ 58.559190][ T4189] [ 58.901541][ T4193] FAULT_INJECTION: forcing a failure. [ 58.901541][ T4193] name failslab, interval 1, probability 0, space 0, times 1 [ 58.914557][ T4193] CPU: 1 UID: 0 PID: 4193 Comm: syz.2.197 Not tainted syzkaller #0 PREEMPT(voluntary) [ 58.914652][ T4193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 58.914669][ T4193] Call Trace: [ 58.914677][ T4193] [ 58.914686][ T4193] __dump_stack+0x1d/0x30 [ 58.914756][ T4193] dump_stack_lvl+0xe8/0x140 [ 58.914806][ T4193] dump_stack+0x15/0x1b [ 58.914828][ T4193] should_fail_ex+0x265/0x280 [ 58.914860][ T4193] should_failslab+0x8c/0xb0 [ 58.914899][ T4193] kmem_cache_alloc_node_noprof+0x57/0x320 [ 58.914938][ T4193] ? __alloc_skb+0x101/0x320 [ 58.914969][ T4193] __alloc_skb+0x101/0x320 [ 58.914995][ T4193] netlink_dump+0x10d/0x8a0 [ 58.915026][ T4193] ? ip_set_dump_start+0xf0/0x320 [ 58.915136][ T4193] ? ip_set_dump_start+0x245/0x320 [ 58.915185][ T4193] __netlink_dump_start+0x43e/0x520 [ 58.915227][ T4193] ip_set_dump+0xa4/0xf0 [ 58.915267][ T4193] ? __pfx_ip_set_dump_start+0x10/0x10 [ 58.915290][ T4193] ? __pfx_ip_set_dump_do+0x10/0x10 [ 58.915316][ T4193] ? __pfx_ip_set_dump_done+0x10/0x10 [ 58.915377][ T4193] nfnetlink_rcv_msg+0x4c3/0x590 [ 58.915447][ T4193] netlink_rcv_skb+0x123/0x220 [ 58.915474][ T4193] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 58.915550][ T4193] nfnetlink_rcv+0x16b/0x1690 [ 58.915601][ T4193] ? refill_obj_stock+0x254/0x2e0 [ 58.915678][ T4193] ? ___slab_alloc+0x273/0x910 [ 58.915763][ T4193] ? obj_cgroup_charge_account+0xba/0x1a0 [ 58.915806][ T4193] ? security_inode_alloc+0x37/0x100 [ 58.915842][ T4193] ? xas_load+0x413/0x430 [ 58.915927][ T4193] ? xas_load+0x413/0x430 [ 58.915960][ T4193] ? __rcu_read_unlock+0x4f/0x70 [ 58.915981][ T4193] ? xa_load+0xb1/0xe0 [ 58.916012][ T4193] ? __account_obj_stock+0x211/0x350 [ 58.916121][ T4193] ? obj_cgroup_charge_account+0x122/0x1a0 [ 58.916157][ T4193] ? should_fail_ex+0x30/0x280 [ 58.916298][ T4193] ? __rcu_read_unlock+0x4f/0x70 [ 58.916322][ T4193] ? should_fail_ex+0xdb/0x280 [ 58.916415][ T4193] ? selinux_nlmsg_lookup+0x99/0x890 [ 58.916450][ T4193] ? __rcu_read_unlock+0x34/0x70 [ 58.916474][ T4193] ? __netlink_lookup+0x266/0x2a0 [ 58.916543][ T4193] netlink_unicast+0x5bd/0x690 [ 58.916567][ T4193] netlink_sendmsg+0x58b/0x6b0 [ 58.916616][ T4193] ? __pfx_netlink_sendmsg+0x10/0x10 [ 58.916643][ T4193] __sock_sendmsg+0x145/0x180 [ 58.916676][ T4193] ____sys_sendmsg+0x31e/0x4e0 [ 58.916705][ T4193] ___sys_sendmsg+0x17b/0x1d0 [ 58.916782][ T4193] __x64_sys_sendmsg+0xd4/0x160 [ 58.916813][ T4193] x64_sys_call+0x191e/0x2ff0 [ 58.916837][ T4193] do_syscall_64+0xd2/0x200 [ 58.916870][ T4193] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 58.916914][ T4193] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 58.916946][ T4193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.916969][ T4193] RIP: 0033:0x7f409ab0eec9 [ 58.916998][ T4193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.917032][ T4193] RSP: 002b:00007f409956f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 58.917073][ T4193] RAX: ffffffffffffffda RBX: 00007f409ad65fa0 RCX: 00007f409ab0eec9 [ 58.917165][ T4193] RDX: 0000000000048810 RSI: 0000200000000140 RDI: 0000000000000003 [ 58.917179][ T4193] RBP: 00007f409956f090 R08: 0000000000000000 R09: 0000000000000000 [ 58.917200][ T4193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.917214][ T4193] R13: 00007f409ad66038 R14: 00007f409ad65fa0 R15: 00007ffd81fefce8 [ 58.917236][ T4193] [ 59.270953][ T4195] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 59.280879][ T4193] syz.2.197 (4193) used greatest stack depth: 10136 bytes left [ 59.395998][ T3388] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 59.413513][ T4207] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.459329][ T3388] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 59.480935][ T4207] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.493569][ T4203] SELinux: failed to load policy [ 59.684034][ T4207] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.767585][ T4205] siw: device registration error -23 [ 59.784588][ T4224] FAULT_INJECTION: forcing a failure. [ 59.784588][ T4224] name failslab, interval 1, probability 0, space 0, times 0 [ 59.797411][ T4224] CPU: 1 UID: 0 PID: 4224 Comm: syz.4.208 Not tainted syzkaller #0 PREEMPT(voluntary) [ 59.797475][ T4224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 59.797491][ T4224] Call Trace: [ 59.797527][ T4224] [ 59.797538][ T4224] __dump_stack+0x1d/0x30 [ 59.797562][ T4224] dump_stack_lvl+0xe8/0x140 [ 59.797585][ T4224] dump_stack+0x15/0x1b [ 59.797607][ T4224] should_fail_ex+0x265/0x280 [ 59.797733][ T4224] should_failslab+0x8c/0xb0 [ 59.797779][ T4224] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 59.797814][ T4224] ? __d_alloc+0x3d/0x340 [ 59.797849][ T4224] __d_alloc+0x3d/0x340 [ 59.797877][ T4224] ? mpol_shared_policy_init+0xbd/0x4c0 [ 59.797920][ T4224] d_alloc_pseudo+0x1e/0x80 [ 59.797978][ T4224] alloc_file_pseudo+0x71/0x160 [ 59.798033][ T4224] __shmem_file_setup+0x1de/0x210 [ 59.798072][ T4224] shmem_file_setup+0x3b/0x50 [ 59.798163][ T4224] __se_sys_memfd_create+0x2c3/0x590 [ 59.798193][ T4224] __x64_sys_memfd_create+0x31/0x40 [ 59.798220][ T4224] x64_sys_call+0x2abe/0x2ff0 [ 59.798245][ T4224] do_syscall_64+0xd2/0x200 [ 59.798284][ T4224] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 59.798448][ T4224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.798475][ T4224] RIP: 0033:0x7f2815e6eec9 [ 59.798495][ T4224] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.798516][ T4224] RSP: 002b:00007f28148d6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 59.798536][ T4224] RAX: ffffffffffffffda RBX: 00000000000002f7 RCX: 00007f2815e6eec9 [ 59.798549][ T4224] RDX: 00007f28148d6ef0 RSI: 0000000000000000 RDI: 00007f2815ef2960 [ 59.798625][ T4224] RBP: 00002000000003c0 R08: 00007f28148d6bb7 R09: 00007f28148d6e40 [ 59.798640][ T4224] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000340 [ 59.798655][ T4224] R13: 00007f28148d6ef0 R14: 00007f28148d6eb0 R15: 0000200000000000 [ 59.798676][ T4224] [ 60.006235][ T4207] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.022384][ T4225] loop3: detected capacity change from 0 to 512 [ 60.112380][ T4225] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.171208][ T4225] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 60.217530][ T4241] netlink: 'syz.2.212': attribute type 4 has an invalid length. [ 60.260154][ T37] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 60.273025][ T37] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 60.353870][ T108] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.384144][ T108] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.404705][ T108] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.455231][ T108] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.678441][ T4219] Set syz1 is full, maxelem 65536 reached [ 60.803457][ T4264] FAULT_INJECTION: forcing a failure. [ 60.803457][ T4264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.816592][ T4264] CPU: 1 UID: 0 PID: 4264 Comm: syz.4.220 Not tainted syzkaller #0 PREEMPT(voluntary) [ 60.816626][ T4264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 60.816664][ T4264] Call Trace: [ 60.816671][ T4264] [ 60.816679][ T4264] __dump_stack+0x1d/0x30 [ 60.816701][ T4264] dump_stack_lvl+0xe8/0x140 [ 60.816765][ T4264] dump_stack+0x15/0x1b [ 60.816807][ T4264] should_fail_ex+0x265/0x280 [ 60.816836][ T4264] should_fail+0xb/0x20 [ 60.816857][ T4264] should_fail_usercopy+0x1a/0x20 [ 60.816890][ T4264] strncpy_from_user+0x25/0x230 [ 60.817064][ T4264] ? __fget_files+0x184/0x1c0 [ 60.817170][ T4264] __se_sys_request_key+0x57/0x290 [ 60.817194][ T4264] ? fput+0x8f/0xc0 [ 60.817236][ T4264] __x64_sys_request_key+0x55/0x70 [ 60.817295][ T4264] x64_sys_call+0x1d98/0x2ff0 [ 60.817323][ T4264] do_syscall_64+0xd2/0x200 [ 60.817438][ T4264] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 60.817470][ T4264] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 60.817498][ T4264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.817522][ T4264] RIP: 0033:0x7f2815e6eec9 [ 60.817542][ T4264] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 60.817636][ T4264] RSP: 002b:00007f28148d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 60.817668][ T4264] RAX: ffffffffffffffda RBX: 00007f28160c5fa0 RCX: 00007f2815e6eec9 [ 60.817684][ T4264] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 60.817699][ T4264] RBP: 00007f28148d7090 R08: 0000000000000000 R09: 0000000000000000 [ 60.817715][ T4264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.817731][ T4264] R13: 00007f28160c6038 R14: 00007f28160c5fa0 R15: 00007ffddb5e3218 [ 60.817756][ T4264] [ 60.824131][ T4258] lo speed is unknown, defaulting to 1000 [ 61.209831][ T4276] netlink: 'syz.2.224': attribute type 4 has an invalid length. [ 61.402952][ T4272] lo speed is unknown, defaulting to 1000 [ 61.489861][ T4279] loop2: detected capacity change from 0 to 764 [ 61.652457][ T37] hid-generic 0000:0000:0000.0016: unknown main item tag 0x0 [ 61.666245][ T37] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [syz1] on syz0 [ 61.965305][ T29] kauditd_printk_skb: 455 callbacks suppressed [ 61.965321][ T29] audit: type=1326 audit(1759092313.317:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8597beeec9 code=0x7ffc0000 [ 61.997188][ T29] audit: type=1326 audit(1759092313.317:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8597beeec9 code=0x7ffc0000 [ 62.025517][ T29] audit: type=1326 audit(1759092313.377:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f8597beeec9 code=0x7ffc0000 [ 62.100022][ T29] audit: type=1326 audit(1759092313.387:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8597beeec9 code=0x7ffc0000 [ 62.124288][ T29] audit: type=1326 audit(1759092313.387:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8597beeec9 code=0x7ffc0000 [ 62.149566][ T29] audit: type=1326 audit(1759092313.387:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8597beeec9 code=0x7ffc0000 [ 62.173527][ T29] audit: type=1326 audit(1759092313.387:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8597beeec9 code=0x7ffc0000 [ 62.197876][ T29] audit: type=1326 audit(1759092313.387:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8597beeec9 code=0x7ffc0000 [ 62.221584][ T29] audit: type=1326 audit(1759092313.387:2581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8597beeec9 code=0x7ffc0000 [ 62.245771][ T29] audit: type=1326 audit(1759092313.387:2582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4286 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8597beeec9 code=0x7ffc0000 [ 62.350402][ T4313] netlink: 'syz.0.235': attribute type 4 has an invalid length. [ 62.362740][ T4315] capability: warning: `syz.2.236' uses deprecated v2 capabilities in a way that may be insecure [ 62.549033][ T4329] netlink: 'syz.5.241': attribute type 3 has an invalid length. [ 62.556926][ T4329] __nla_validate_parse: 2 callbacks suppressed [ 62.556946][ T4329] netlink: 130984 bytes leftover after parsing attributes in process `syz.5.241'. [ 62.692467][ T4336] loop2: detected capacity change from 0 to 164 [ 62.708504][ T4336] rock: corrupted directory entry. extent=32, offset=0, size=65773 [ 62.716842][ T4336] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 62.738689][ T4338] netlink: 176 bytes leftover after parsing attributes in process `syz.5.244'. [ 62.752594][ T4338] loop5: detected capacity change from 0 to 164 [ 62.775423][ T4338] netlink: 'syz.5.244': attribute type 4 has an invalid length. [ 62.823200][ T4338] netlink: 'syz.5.244': attribute type 4 has an invalid length. [ 62.912717][ T4347] loop0: detected capacity change from 0 to 2048 [ 62.960283][ T4347] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.135846][ T3306] EXT4-fs error (device loop0): ext4_find_extent:939: inode #2: comm syz-executor: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 63.203553][ T4366] lo speed is unknown, defaulting to 1000 [ 63.210232][ T3306] EXT4-fs (loop0): Remounting filesystem read-only [ 63.269745][ T3306] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.960562][ T4437] loop5: detected capacity change from 0 to 764 [ 64.046952][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.134253][ T4446] loop3: detected capacity change from 0 to 2048 [ 64.150221][ T4446] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.191861][ T3301] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz-executor: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 64.211418][ T4433] lo speed is unknown, defaulting to 1000 [ 64.236167][ T3301] EXT4-fs (loop3): Remounting filesystem read-only [ 64.267920][ T4453] netlink: 176 bytes leftover after parsing attributes in process `syz.2.268'. [ 64.283799][ T4453] loop2: detected capacity change from 0 to 164 [ 64.307095][ T4453] syz.2.268: attempt to access beyond end of device [ 64.307095][ T4453] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 64.321163][ T4453] syz.2.268: attempt to access beyond end of device [ 64.321163][ T4453] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 64.335680][ T4453] netlink: 'syz.2.268': attribute type 4 has an invalid length. [ 64.360348][ T4453] netlink: 'syz.2.268': attribute type 4 has an invalid length. [ 64.528340][ T4451] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.581836][ T4459] netlink: 'syz.2.270': attribute type 3 has an invalid length. [ 64.589899][ T4459] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.270'. [ 64.814339][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.848420][ T4464] lo speed is unknown, defaulting to 1000 [ 64.858749][ T4478] netlink: 4 bytes leftover after parsing attributes in process `syz.5.276'. [ 64.883570][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 64.899610][ T4481] loop4: detected capacity change from 0 to 512 [ 64.913427][ T4478] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.915742][ T4481] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.921503][ T4478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.948301][ T4478] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.955546][ T4481] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 64.955951][ T4478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.001061][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.060896][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.184858][ T4474] lo speed is unknown, defaulting to 1000 [ 65.277418][ T4464] chnl_net:caif_netlink_parms(): no params data found [ 65.319917][ T4494] lo speed is unknown, defaulting to 1000 [ 65.326260][ T51] bridge_slave_1: left allmulticast mode [ 65.332157][ T51] bridge_slave_1: left promiscuous mode [ 65.338068][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.384636][ T51] bridge_slave_0: left allmulticast mode [ 65.390521][ T51] bridge_slave_0: left promiscuous mode [ 65.396388][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.451506][ T4509] netlink: 'syz.2.280': attribute type 3 has an invalid length. [ 65.459586][ T4509] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.280'. [ 65.572347][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 65.582932][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 65.595735][ T51] bond0 (unregistering): Released all slaves [ 65.658823][ T51] hsr_slave_0: left promiscuous mode [ 65.680077][ T51] hsr_slave_1: left promiscuous mode [ 65.688282][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.696171][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.705118][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.712729][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.725243][ T51] veth1_macvtap: left promiscuous mode [ 65.725459][ T51] veth0_macvtap: left promiscuous mode [ 65.725513][ T51] veth1_vlan: left promiscuous mode [ 65.725760][ T51] veth0_vlan: left promiscuous mode [ 65.842488][ T51] team0 (unregistering): Port device team_slave_1 removed [ 65.853007][ T51] team0 (unregistering): Port device team_slave_0 removed [ 65.952997][ T4464] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.960223][ T4464] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.974265][ T4464] bridge_slave_0: entered allmulticast mode [ 65.981563][ T4464] bridge_slave_0: entered promiscuous mode [ 65.997022][ T4517] lo speed is unknown, defaulting to 1000 [ 66.005422][ T4464] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.012935][ T4464] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.020485][ T4464] bridge_slave_1: entered allmulticast mode [ 66.027164][ T4464] bridge_slave_1: entered promiscuous mode [ 66.070963][ T4464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.088909][ T4474] chnl_net:caif_netlink_parms(): no params data found [ 66.107491][ T4464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.209812][ T4464] team0: Port device team_slave_0 added [ 66.216858][ T4464] team0: Port device team_slave_1 added [ 66.254454][ T4536] netlink: 'syz.2.284': attribute type 4 has an invalid length. [ 66.254624][ T4464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.269649][ T4464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.299591][ T4464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.348046][ T4464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.355335][ T4464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.383131][ T4464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.431055][ T4474] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.438450][ T4474] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.447718][ T4474] bridge_slave_0: entered allmulticast mode [ 66.458179][ T23] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 66.476793][ T4474] bridge_slave_0: entered promiscuous mode [ 66.484187][ T23] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 66.505227][ T4474] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.513297][ T4474] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.527789][ T4474] bridge_slave_1: entered allmulticast mode [ 66.547418][ T4474] bridge_slave_1: entered promiscuous mode [ 66.611283][ T4474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.645663][ T4464] hsr_slave_0: entered promiscuous mode [ 66.688134][ T4464] hsr_slave_1: entered promiscuous mode [ 66.694283][ T4464] debugfs: 'hsr0' already exists in 'hsr' [ 66.700931][ T4464] Cannot create hsr debugfs directory [ 66.714953][ T4474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.735050][ T4551] Invalid logical block size (6) [ 66.876729][ T4474] team0: Port device team_slave_0 added [ 66.899586][ T4474] team0: Port device team_slave_1 added [ 66.977108][ T4567] netlink: 'syz.2.289': attribute type 4 has an invalid length. [ 66.998325][ T4474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.005524][ T4474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.032764][ T4474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.058485][ T4474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.065826][ T4474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.095320][ T4474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.115138][ T4560] lo speed is unknown, defaulting to 1000 [ 67.265683][ T4474] hsr_slave_0: entered promiscuous mode [ 67.274545][ T4474] hsr_slave_1: entered promiscuous mode [ 67.281789][ T4474] debugfs: 'hsr0' already exists in 'hsr' [ 67.287745][ T4474] Cannot create hsr debugfs directory [ 67.394809][ T4464] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 67.449543][ T4464] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 67.462793][ T29] kauditd_printk_skb: 365 callbacks suppressed [ 67.462810][ T29] audit: type=1326 audit(1759092318.817:2948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4600 comm="syz.5.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02f02eec9 code=0x7ffc0000 [ 67.498374][ T4601] SELinux: security_context_str_to_sid (s) failed with errno=-22 [ 67.515213][ T29] audit: type=1326 audit(1759092318.847:2949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4600 comm="syz.5.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fd02f02eec9 code=0x7ffc0000 [ 67.540537][ T29] audit: type=1326 audit(1759092318.847:2950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4600 comm="syz.5.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02f02eec9 code=0x7ffc0000 [ 67.564940][ T29] audit: type=1326 audit(1759092318.847:2951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4600 comm="syz.5.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02f02eec9 code=0x7ffc0000 [ 67.591699][ T29] audit: type=1326 audit(1759092318.847:2952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4600 comm="syz.5.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd02f02eec9 code=0x7ffc0000 [ 67.617643][ T29] audit: type=1326 audit(1759092318.847:2953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4600 comm="syz.5.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02f02eec9 code=0x7ffc0000 [ 67.642880][ T29] audit: type=1326 audit(1759092318.847:2954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4600 comm="syz.5.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02f02eec9 code=0x7ffc0000 [ 67.668706][ T29] audit: type=1326 audit(1759092318.847:2955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4600 comm="syz.5.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd02f02eec9 code=0x7ffc0000 [ 67.693698][ T29] audit: type=1326 audit(1759092318.847:2956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4600 comm="syz.5.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02f02eec9 code=0x7ffc0000 [ 67.722307][ T29] audit: type=1326 audit(1759092318.847:2957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4600 comm="syz.5.291" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd02f02eec9 code=0x7ffc0000 [ 67.774792][ T4464] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 67.827262][ T4464] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 67.920552][ T4607] lo speed is unknown, defaulting to 1000 [ 67.939325][ T4474] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 67.954359][ T4474] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 67.990935][ T4474] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 68.006011][ T4474] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 68.139152][ T4464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.173998][ T37] hid-generic 0000:0000:0000.0018: unknown main item tag 0x0 [ 68.193555][ T37] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [syz1] on syz0 [ 68.219465][ T4464] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.255116][ T3309] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.274953][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.282206][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.292368][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.300186][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.375772][ T4640] lo speed is unknown, defaulting to 1000 [ 68.464549][ T4474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.506731][ T4474] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.547686][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.555013][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.579790][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.587132][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.663696][ T4464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.783203][ T4474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.880322][ T4464] veth0_vlan: entered promiscuous mode [ 68.893320][ T4464] veth1_vlan: entered promiscuous mode [ 68.914296][ T4464] veth0_macvtap: entered promiscuous mode [ 68.923489][ T4464] veth1_macvtap: entered promiscuous mode [ 68.942483][ T4464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.958584][ T4474] veth0_vlan: entered promiscuous mode [ 68.967191][ T4464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.979837][ T4474] veth1_vlan: entered promiscuous mode [ 68.989829][ T51] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.000196][ T51] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.010930][ T51] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.024699][ T51] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.046908][ T4474] veth0_macvtap: entered promiscuous mode [ 69.059567][ T4474] veth1_macvtap: entered promiscuous mode [ 69.084081][ T4474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.094268][ T4474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.109997][ T108] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.119569][ T108] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.129478][ T108] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.142406][ T108] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.200577][ T4703] netlink: 176 bytes leftover after parsing attributes in process `syz.6.305'. [ 69.217849][ T4703] loop6: detected capacity change from 0 to 164 [ 69.223746][ T4705] netlink: 'syz.7.274': attribute type 4 has an invalid length. [ 69.240651][ T4703] syz.6.305: attempt to access beyond end of device [ 69.240651][ T4703] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 69.257052][ T4703] syz.6.305: attempt to access beyond end of device [ 69.257052][ T4703] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 69.279472][ T4703] netlink: 'syz.6.305': attribute type 4 has an invalid length. [ 69.291087][ T4703] netlink: 'syz.6.305': attribute type 4 has an invalid length. [ 69.435037][ T4716] netlink: 'syz.4.308': attribute type 10 has an invalid length. [ 69.516318][ T4720] loop2: detected capacity change from 0 to 512 [ 69.529937][ T4718] Invalid logical block size (6) [ 69.548239][ T4720] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.310: error while reading EA inode 32 err=-116 [ 69.565789][ T4723] loop6: detected capacity change from 0 to 512 [ 69.593376][ T4720] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 69.607984][ T4720] EXT4-fs error (device loop2): ext4_xattr_inode_iget:442: comm syz.2.310: error while reading EA inode 32 err=-116 [ 69.621760][ T4720] EXT4-fs (loop2): 1 orphan inode deleted [ 69.640326][ T4720] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.665220][ T4728] netlink: 'syz.4.311': attribute type 3 has an invalid length. [ 69.674441][ T4728] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.311'. [ 69.702956][ T4723] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.706864][ T4720] lo speed is unknown, defaulting to 1000 [ 69.748785][ T4723] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.954111][ T4746] netlink: 4 bytes leftover after parsing attributes in process `syz.5.316'. [ 69.991650][ T4750] netlink: 'syz.4.317': attribute type 4 has an invalid length. [ 70.001196][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.094997][ T4755] FAULT_INJECTION: forcing a failure. [ 70.094997][ T4755] name failslab, interval 1, probability 0, space 0, times 0 [ 70.108311][ T4755] CPU: 0 UID: 0 PID: 4755 Comm: syz.5.320 Not tainted syzkaller #0 PREEMPT(voluntary) [ 70.108347][ T4755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 70.108364][ T4755] Call Trace: [ 70.108373][ T4755] [ 70.108383][ T4755] __dump_stack+0x1d/0x30 [ 70.108411][ T4755] dump_stack_lvl+0xe8/0x140 [ 70.108484][ T4755] dump_stack+0x15/0x1b [ 70.108506][ T4755] should_fail_ex+0x265/0x280 [ 70.108565][ T4755] should_failslab+0x8c/0xb0 [ 70.108592][ T4755] kmem_cache_alloc_node_noprof+0x57/0x320 [ 70.108632][ T4755] ? __alloc_skb+0x101/0x320 [ 70.108704][ T4755] __alloc_skb+0x101/0x320 [ 70.108731][ T4755] netlink_alloc_large_skb+0xba/0xf0 [ 70.108790][ T4755] netlink_sendmsg+0x3cf/0x6b0 [ 70.108817][ T4755] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.108841][ T4755] __sock_sendmsg+0x145/0x180 [ 70.108901][ T4755] ____sys_sendmsg+0x31e/0x4e0 [ 70.108934][ T4755] ___sys_sendmsg+0x17b/0x1d0 [ 70.108983][ T4755] __x64_sys_sendmsg+0xd4/0x160 [ 70.109016][ T4755] x64_sys_call+0x191e/0x2ff0 [ 70.109087][ T4755] do_syscall_64+0xd2/0x200 [ 70.109128][ T4755] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 70.109160][ T4755] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 70.109274][ T4755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.109305][ T4755] RIP: 0033:0x7fd02f02eec9 [ 70.109325][ T4755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.109349][ T4755] RSP: 002b:00007fd02da8f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.109374][ T4755] RAX: ffffffffffffffda RBX: 00007fd02f285fa0 RCX: 00007fd02f02eec9 [ 70.109439][ T4755] RDX: 0000000000000100 RSI: 00002000000002c0 RDI: 0000000000000007 [ 70.109456][ T4755] RBP: 00007fd02da8f090 R08: 0000000000000000 R09: 0000000000000000 [ 70.109471][ T4755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.109485][ T4755] R13: 00007fd02f286038 R14: 00007fd02f285fa0 R15: 00007ffebf9ea218 [ 70.109578][ T4755] [ 70.114917][ T37] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 70.335274][ T4758] SELinux: policydb version -2103515528 does not match my version range 15-35 [ 70.346687][ T4758] SELinux: failed to load policy [ 70.368398][ T4758] syz.7.321 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 70.397479][ T4758] loop7: detected capacity change from 0 to 764 [ 70.409592][ T37] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 70.426905][ T4758] rock: directory entry would overflow storage [ 70.434160][ T4758] rock: sig=0x4f50, size=4, remaining=3 [ 70.440832][ T4758] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 70.528443][ T4761] loop5: detected capacity change from 0 to 2048 [ 70.552455][ T4761] EXT4-fs: Invalid want_extra_isize 10 [ 70.611792][ T4763] lo speed is unknown, defaulting to 1000 [ 70.655209][ T4765] loop5: detected capacity change from 0 to 164 [ 70.675168][ T4765] rock: corrupted directory entry. extent=32, offset=0, size=65773 [ 70.683387][ T4765] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 70.889305][ T4770] lo speed is unknown, defaulting to 1000 [ 71.068512][ T4780] netlink: 'syz.4.329': attribute type 4 has an invalid length. [ 71.142501][ T10] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 71.165605][ T10] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 71.273980][ T4786] lo speed is unknown, defaulting to 1000 [ 71.357461][ T4788] random: crng reseeded on system resumption [ 71.444664][ T4786] Restarting kernel threads ... [ 71.456625][ T4786] Done restarting kernel threads. [ 71.955449][ T4801] loop4: detected capacity change from 0 to 764 [ 72.289184][ T4804] lo speed is unknown, defaulting to 1000 [ 72.476364][ T29] kauditd_printk_skb: 500 callbacks suppressed [ 72.476380][ T29] audit: type=1326 audit(1759092323.827:3458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4806 comm="syz.7.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2471ffeec9 code=0x7ffc0000 [ 72.479053][ T4808] netlink: 176 bytes leftover after parsing attributes in process `syz.5.338'. [ 72.493994][ T29] audit: type=1326 audit(1759092323.837:3459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4806 comm="syz.7.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2471ffeec9 code=0x7ffc0000 [ 72.540657][ T29] audit: type=1326 audit(1759092323.837:3460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4806 comm="syz.7.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f2471ffeec9 code=0x7ffc0000 [ 72.553254][ T4810] loop5: detected capacity change from 0 to 164 [ 72.564774][ T29] audit: type=1326 audit(1759092323.837:3461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4806 comm="syz.7.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2471ffeec9 code=0x7ffc0000 [ 72.595370][ T29] audit: type=1326 audit(1759092323.837:3462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4806 comm="syz.7.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2471ffeec9 code=0x7ffc0000 [ 72.619332][ T29] audit: type=1326 audit(1759092323.837:3463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4806 comm="syz.7.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2471ffeec9 code=0x7ffc0000 [ 72.643288][ T29] audit: type=1326 audit(1759092323.837:3464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4806 comm="syz.7.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2471ffeec9 code=0x7ffc0000 [ 72.646845][ T4808] syz.5.338: attempt to access beyond end of device [ 72.646845][ T4808] loop5: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 72.667273][ T29] audit: type=1326 audit(1759092323.837:3465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4806 comm="syz.7.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2471ffeec9 code=0x7ffc0000 [ 72.667311][ T29] audit: type=1326 audit(1759092323.837:3466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4806 comm="syz.7.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2471ffeec9 code=0x7ffc0000 [ 72.667344][ T29] audit: type=1326 audit(1759092323.837:3467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4806 comm="syz.7.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2471ffeec9 code=0x7ffc0000 [ 72.756113][ T3395] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 72.767814][ T4810] netlink: 'syz.5.338': attribute type 4 has an invalid length. [ 72.778947][ T4810] netlink: 'syz.5.338': attribute type 4 has an invalid length. [ 72.802178][ T3395] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 72.804105][ T4808] syz.5.338: attempt to access beyond end of device [ 72.804105][ T4808] loop5: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 72.900531][ T4816] netlink: 'syz.5.340': attribute type 4 has an invalid length. [ 72.958619][ T4818] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.011533][ T4818] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.062173][ T4809] siw: device registration error -23 [ 73.091797][ T4818] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.184369][ T4818] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.286524][ T4831] SELinux: syz.7.344 (4831) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 73.305443][ T108] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.331745][ T108] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.368756][ T108] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.390894][ T108] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.401184][ T4832] netlink: 24 bytes leftover after parsing attributes in process `syz.7.344'. [ 73.640667][ T4846] netlink: 'syz.5.346': attribute type 3 has an invalid length. [ 73.648476][ T4846] netlink: 130984 bytes leftover after parsing attributes in process `syz.5.346'. [ 73.815999][ T4857] lo speed is unknown, defaulting to 1000 [ 74.041185][ T4464] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.116023][ T4880] netlink: 176 bytes leftover after parsing attributes in process `syz.6.350'. [ 74.135923][ T4880] loop6: detected capacity change from 0 to 164 [ 74.170783][ T4880] syz.6.350: attempt to access beyond end of device [ 74.170783][ T4880] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 74.199445][ T4880] syz.6.350: attempt to access beyond end of device [ 74.199445][ T4880] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 74.214078][ T4880] netlink: 'syz.6.350': attribute type 4 has an invalid length. [ 74.225144][ T4880] netlink: 'syz.6.350': attribute type 4 has an invalid length. [ 74.279558][ T4876] loop4: detected capacity change from 0 to 764 [ 74.343213][ T4890] lo speed is unknown, defaulting to 1000 [ 74.553917][ T37] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 74.569657][ T37] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 74.676460][ T4919] lo speed is unknown, defaulting to 1000 [ 75.160039][ T9] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 75.202586][ T9] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 75.241881][ T37] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 75.280778][ T37] hid-generic 0000:0000:0000.001E: hidraw1: HID v0.00 Device [syz1] on syz0 [ 75.294485][ T4953] netlink: 60 bytes leftover after parsing attributes in process `syz.6.354'. [ 75.303807][ T4934] netlink: 60 bytes leftover after parsing attributes in process `syz.6.354'. [ 75.705918][ T4963] loop6: detected capacity change from 0 to 512 [ 75.724970][ T4963] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.757987][ T4963] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.810767][ T4970] loop2: detected capacity change from 0 to 764 [ 75.951626][ T4973] netlink: 19 bytes leftover after parsing attributes in process `syz.4.361'. [ 76.086971][ T4962] lo speed is unknown, defaulting to 1000 [ 76.816696][ T4990] netlink: 224 bytes leftover after parsing attributes in process `syz.5.367'. [ 77.885363][ T4464] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.985562][ T5004] lo speed is unknown, defaulting to 1000 [ 77.997378][ T29] kauditd_printk_skb: 336 callbacks suppressed [ 77.997397][ T29] audit: type=1326 audit(1759092329.347:3804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5005 comm="syz.2.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409ab0eec9 code=0x7ffc0000 [ 78.038694][ T10] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 78.057323][ T10] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 78.124400][ T29] audit: type=1326 audit(1759092329.387:3805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5005 comm="syz.2.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f409ab0eec9 code=0x7ffc0000 [ 78.148883][ T29] audit: type=1326 audit(1759092329.387:3806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5005 comm="syz.2.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409ab0eec9 code=0x7ffc0000 [ 78.172371][ T29] audit: type=1326 audit(1759092329.387:3807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5005 comm="syz.2.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409ab0eec9 code=0x7ffc0000 [ 78.196007][ T29] audit: type=1326 audit(1759092329.387:3808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5005 comm="syz.2.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f409ab0eec9 code=0x7ffc0000 [ 78.219805][ T29] audit: type=1326 audit(1759092329.387:3809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5005 comm="syz.2.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409ab0eec9 code=0x7ffc0000 [ 78.243542][ T29] audit: type=1326 audit(1759092329.387:3810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5005 comm="syz.2.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409ab0eec9 code=0x7ffc0000 [ 78.267322][ T29] audit: type=1326 audit(1759092329.387:3811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5005 comm="syz.2.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f409ab0eec9 code=0x7ffc0000 [ 78.291125][ T29] audit: type=1326 audit(1759092329.387:3812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5005 comm="syz.2.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409ab0eec9 code=0x7ffc0000 [ 78.316915][ T29] audit: type=1326 audit(1759092329.387:3813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5005 comm="syz.2.372" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409ab0eec9 code=0x7ffc0000 [ 78.416464][ T5020] netlink: 4 bytes leftover after parsing attributes in process `syz.7.374'. [ 78.455425][ T5020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.463197][ T5020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.508481][ T5020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.516446][ T5020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.731162][ T5038] lo speed is unknown, defaulting to 1000 [ 78.853392][ T5046] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.932195][ T5046] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.134148][ T5046] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.223023][ T5046] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.280585][ T5076] loop7: detected capacity change from 0 to 512 [ 79.307268][ T5066] loop2: detected capacity change from 0 to 764 [ 79.325230][ T12] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.342888][ T5076] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.388015][ T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.428505][ T5076] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.450725][ T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.488167][ T12] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.046684][ T5104] lo speed is unknown, defaulting to 1000 [ 80.175541][ T5111] lo speed is unknown, defaulting to 1000 [ 80.204838][ T5114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.389'. [ 80.468731][ T5135] netlink: 'syz.6.392': attribute type 1 has an invalid length. [ 80.646536][ T5147] netlink: 224 bytes leftover after parsing attributes in process `syz.4.395'. [ 80.703925][ T5149] loop4: detected capacity change from 0 to 128 [ 81.420064][ T5165] netlink: 'syz.5.402': attribute type 4 has an invalid length. [ 81.499135][ T5167] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.526058][ T5163] loop6: detected capacity change from 0 to 764 [ 81.571235][ T5167] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.640576][ T5167] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.719537][ T5167] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.819278][ T51] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.832839][ T51] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.868405][ T51] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.877188][ T51] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.978947][ T5176] netlink: 'syz.5.405': attribute type 4 has an invalid length. [ 82.011704][ T5174] netlink: 60 bytes leftover after parsing attributes in process `syz.2.400'. [ 82.022174][ T5158] netlink: 60 bytes leftover after parsing attributes in process `syz.2.400'. [ 82.055602][ T5178] netlink: 'syz.5.406': attribute type 4 has an invalid length. [ 82.067759][ T4968] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 328: padding at end of block bitmap is not set [ 82.162046][ T10] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 82.177813][ T10] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 82.197069][ T37] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 82.239735][ T37] hid-generic 0000:0000:0000.0021: hidraw1: HID v0.00 Device [syz1] on syz0 [ 82.635497][ T5200] netlink: 'syz.4.413': attribute type 4 has an invalid length. [ 82.701733][ T5182] siw: device registration error -23 [ 82.709978][ T5202] loop4: detected capacity change from 0 to 164 [ 82.739892][ T5180] siw: device registration error -23 [ 82.745991][ T5202] rock: corrupted directory entry. extent=32, offset=0, size=65773 [ 82.754260][ T5202] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 82.823688][ T5204] loop4: detected capacity change from 0 to 128 [ 82.975505][ T3408] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 82.991148][ T5211] loop4: detected capacity change from 0 to 764 [ 83.000602][ T3408] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 83.088394][ T5214] fido_id[5214]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 83.167124][ T5216] lo speed is unknown, defaulting to 1000 [ 83.294852][ T5206] lo speed is unknown, defaulting to 1000 [ 83.487097][ T5220] loop2: detected capacity change from 0 to 164 [ 83.504337][ T4474] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.520143][ T5220] rock: corrupted directory entry. extent=32, offset=0, size=65773 [ 83.528587][ T5220] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 83.579456][ T29] kauditd_printk_skb: 522 callbacks suppressed [ 83.579472][ T29] audit: type=1326 audit(1759092334.937:4336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5219 comm="syz.2.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409ab0eec9 code=0x7ffc0000 [ 83.683099][ T29] audit: type=1326 audit(1759092334.967:4337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5219 comm="syz.2.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=143 compat=0 ip=0x7f409ab0eec9 code=0x7ffc0000 [ 83.707067][ T29] audit: type=1326 audit(1759092334.967:4338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5219 comm="syz.2.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409ab0eec9 code=0x7ffc0000 [ 83.730590][ T29] audit: type=1326 audit(1759092334.967:4339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5219 comm="syz.2.421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409ab0eec9 code=0x7ffc0000 [ 83.847483][ T29] audit: type=1326 audit(1759092335.197:4340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5221 comm="syz.2.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409ab0eec9 code=0x7ffc0000 [ 83.871561][ T29] audit: type=1326 audit(1759092335.197:4341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5221 comm="syz.2.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409ab0eec9 code=0x7ffc0000 [ 83.917478][ T29] audit: type=1326 audit(1759092335.197:4342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5221 comm="syz.2.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f409ab0eec9 code=0x7ffc0000 [ 83.941716][ T29] audit: type=1326 audit(1759092335.197:4343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5221 comm="syz.2.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409ab0eec9 code=0x7ffc0000 [ 83.965548][ T29] audit: type=1326 audit(1759092335.197:4344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5221 comm="syz.2.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f409ab0eec9 code=0x7ffc0000 [ 83.989586][ T29] audit: type=1326 audit(1759092335.257:4345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5221 comm="syz.2.423" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f409ab0eec9 code=0x7ffc0000 [ 84.016878][ T5217] netlink: 60 bytes leftover after parsing attributes in process `syz.5.418'. [ 84.027197][ T5212] netlink: 60 bytes leftover after parsing attributes in process `syz.5.418'. [ 84.264882][ T5235] loop5: detected capacity change from 0 to 764 [ 84.612463][ T5244] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.642377][ T23] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 84.655538][ T23] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz1] on syz0 [ 84.679264][ T5244] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.749195][ T5248] netlink: 60 bytes leftover after parsing attributes in process `syz.2.424'. [ 84.758678][ T5233] netlink: 60 bytes leftover after parsing attributes in process `syz.2.424'. [ 84.770770][ T5244] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.841137][ T5244] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.910891][ T51] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.935459][ T51] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.964837][ T5245] siw: device registration error -23 [ 84.970752][ T51] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.995450][ T51] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.064370][ T5252] netlink: 176 bytes leftover after parsing attributes in process `syz.2.429'. [ 85.082785][ T5255] loop5: detected capacity change from 0 to 128 [ 85.091085][ T5252] loop2: detected capacity change from 0 to 164 [ 85.111093][ T5252] syz.2.429: attempt to access beyond end of device [ 85.111093][ T5252] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 85.136227][ T5252] syz.2.429: attempt to access beyond end of device [ 85.136227][ T5252] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 85.143437][ T5255] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 85.152759][ T5252] netlink: 'syz.2.429': attribute type 4 has an invalid length. [ 85.182528][ T5252] netlink: 'syz.2.429': attribute type 4 has an invalid length. [ 85.206648][ T5255] ext4 filesystem being mounted at /65/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 85.264179][ T5259] netlink: 224 bytes leftover after parsing attributes in process `syz.7.432'. [ 85.277895][ T5261] netlink: 19 bytes leftover after parsing attributes in process `syz.2.433'. [ 85.327819][ T3776] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 85.439354][ T5274] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.524247][ T5274] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.612519][ T5274] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.639335][ T5285] netlink: 'syz.5.440': attribute type 4 has an invalid length. [ 85.669848][ T5274] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.713632][ T10] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 85.742862][ T10] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 85.804559][ T35] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.828878][ T35] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.837126][ T35] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.862055][ T5293] lo speed is unknown, defaulting to 1000 [ 85.869507][ T5288] loop4: detected capacity change from 0 to 764 [ 85.892864][ T35] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.037194][ T5298] loop7: detected capacity change from 0 to 164 [ 86.048015][ T5298] rock: corrupted directory entry. extent=32, offset=0, size=65773 [ 86.056150][ T5298] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 86.119659][ T5306] loop7: detected capacity change from 0 to 2048 [ 86.149765][ T5306] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.183653][ T5291] siw: device registration error -23 [ 86.223094][ T4474] EXT4-fs error (device loop7): ext4_find_extent:939: inode #2: comm syz-executor: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 86.251728][ T4474] EXT4-fs (loop7): Remounting filesystem read-only [ 86.338490][ T5313] __nla_validate_parse: 1 callbacks suppressed [ 86.338513][ T5313] netlink: 4 bytes leftover after parsing attributes in process `syz.5.448'. [ 86.385557][ T5317] loop5: detected capacity change from 0 to 128 [ 86.396748][ T5317] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.417898][ T5317] ext4 filesystem being mounted at /71/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 86.523879][ T5327] loop4: detected capacity change from 0 to 128 [ 86.553337][ T5327] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.578453][ T3776] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.588377][ T5327] ext4 filesystem being mounted at /96/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 86.687415][ T5333] lo speed is unknown, defaulting to 1000 [ 86.727622][ T3309] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.818622][ T5337] lo speed is unknown, defaulting to 1000 [ 86.897157][ T5345] netlink: 'syz.4.459': attribute type 4 has an invalid length. [ 87.065787][ T5349] loop2: detected capacity change from 0 to 764 [ 87.517721][ T5368] Invalid logical block size (6) [ 87.627834][ T5377] Invalid logical block size (6) [ 87.708029][ T5380] netlink: 'syz.4.473': attribute type 3 has an invalid length. [ 87.715896][ T5380] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.473'. [ 87.779685][ T5384] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.796025][ T5386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.476'. [ 87.805668][ T5386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.813197][ T5386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.821191][ T5386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.828793][ T5386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.851973][ T5384] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.919774][ T5384] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.010199][ T5384] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.041438][ T5395] lo speed is unknown, defaulting to 1000 [ 88.104319][ T5395] loop2: detected capacity change from 0 to 764 [ 88.134136][ T51] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.157440][ T51] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.173685][ T51] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.182500][ T51] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.249298][ T5405] loop5: detected capacity change from 0 to 164 [ 88.256183][ T5406] loop6: detected capacity change from 0 to 164 [ 88.263917][ T5405] rock: corrupted directory entry. extent=32, offset=0, size=65773 [ 88.272212][ T5405] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 88.290297][ T5406] rock: corrupted directory entry. extent=32, offset=0, size=65773 [ 88.298881][ T5406] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 88.346977][ T5412] netlink: 'syz.4.487': attribute type 4 has an invalid length. [ 88.478888][ T5416] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.528267][ T5429] lo speed is unknown, defaulting to 1000 [ 88.535737][ T5416] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.569362][ T5433] loop6: detected capacity change from 0 to 764 [ 88.570349][ T5416] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.605631][ T5435] netlink: 'syz.5.496': attribute type 3 has an invalid length. [ 88.614629][ T5435] netlink: 130984 bytes leftover after parsing attributes in process `syz.5.496'. [ 88.635959][ T5416] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.641084][ T5437] loop6: detected capacity change from 0 to 164 [ 88.659454][ T5437] rock: corrupted directory entry. extent=32, offset=0, size=65773 [ 88.667867][ T5437] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 88.713774][ T5439] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.735963][ T1083] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.750468][ T35] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.760057][ T5441] lo speed is unknown, defaulting to 1000 [ 88.776399][ T35] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.802436][ T5439] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.817512][ T35] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.856763][ T29] kauditd_printk_skb: 585 callbacks suppressed [ 88.856787][ T29] audit: type=1326 audit(1759092340.207:4931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5449 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2815e6eec9 code=0x7ffc0000 [ 88.892853][ T5439] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.915831][ T29] audit: type=1326 audit(1759092340.247:4932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5449 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2815e6eec9 code=0x7ffc0000 [ 88.940173][ T29] audit: type=1326 audit(1759092340.247:4933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5449 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2815e6eec9 code=0x7ffc0000 [ 88.965779][ T29] audit: type=1326 audit(1759092340.247:4934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5449 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2815e6eec9 code=0x7ffc0000 [ 88.985000][ T3408] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 88.990208][ T29] audit: type=1326 audit(1759092340.247:4935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5449 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2815e6eec9 code=0x7ffc0000 [ 89.021856][ T29] audit: type=1326 audit(1759092340.247:4936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5449 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2815e6eec9 code=0x7ffc0000 [ 89.045523][ T29] audit: type=1326 audit(1759092340.247:4937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5449 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2815e6eec9 code=0x7ffc0000 [ 89.050173][ T3408] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 89.069129][ T29] audit: type=1326 audit(1759092340.247:4938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5449 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2815e6eec9 code=0x7ffc0000 [ 89.102788][ T29] audit: type=1326 audit(1759092340.247:4939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5449 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f2815e6eec9 code=0x7ffc0000 [ 89.126706][ T29] audit: type=1326 audit(1759092340.247:4940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5449 comm="syz.4.501" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2815e6eec9 code=0x7ffc0000 [ 89.179446][ T5459] fido_id[5459]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 89.223742][ T5439] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.289088][ T1699] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.308997][ T5469] loop5: detected capacity change from 0 to 2048 [ 89.329165][ T51] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.342698][ T5469] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.349013][ T5471] netlink: 176 bytes leftover after parsing attributes in process `syz.2.510'. [ 89.355054][ T35] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.373676][ T5471] loop2: detected capacity change from 0 to 164 [ 89.382825][ T5471] syz.2.510: attempt to access beyond end of device [ 89.382825][ T5471] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 89.399625][ T5471] syz.2.510: attempt to access beyond end of device [ 89.399625][ T5471] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 89.405478][ T35] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.414574][ T5471] netlink: 'syz.2.510': attribute type 4 has an invalid length. [ 89.443145][ T3776] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz-executor: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 89.463324][ T5471] netlink: 'syz.2.510': attribute type 4 has an invalid length. [ 89.478795][ T3776] EXT4-fs (loop5): Remounting filesystem read-only [ 89.522492][ T5480] netlink: 224 bytes leftover after parsing attributes in process `syz.2.513'. [ 89.594575][ T5488] netlink: 'syz.2.517': attribute type 4 has an invalid length. [ 89.733192][ T5497] loop6: detected capacity change from 0 to 2048 [ 89.742187][ T5495] loop2: detected capacity change from 0 to 764 [ 89.765306][ T5497] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.804699][ T4464] EXT4-fs error (device loop6): ext4_find_extent:939: inode #2: comm syz-executor: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 89.822138][ T4464] EXT4-fs (loop6): Remounting filesystem read-only [ 89.856857][ T5494] lo speed is unknown, defaulting to 1000 [ 89.998452][ T5503] Invalid logical block size (6) [ 90.046361][ T5506] loop4: detected capacity change from 0 to 164 [ 90.059209][ T5506] rock: corrupted directory entry. extent=32, offset=0, size=65773 [ 90.067375][ T5506] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 90.088361][ T5311] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.145273][ T5511] netlink: 'syz.4.528': attribute type 4 has an invalid length. [ 90.172195][ T5513] loop4: detected capacity change from 0 to 164 [ 90.180377][ T5513] rock: corrupted directory entry. extent=32, offset=0, size=65773 [ 90.188491][ T5513] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 90.221570][ T51] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.259767][ T51] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.293648][ T5522] lo speed is unknown, defaulting to 1000 [ 90.332847][ T5514] lo speed is unknown, defaulting to 1000 [ 90.361424][ T51] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.411544][ T5514] chnl_net:caif_netlink_parms(): no params data found [ 90.440066][ T51] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.475680][ T5514] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.483568][ T5514] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.495305][ T5514] bridge_slave_0: entered allmulticast mode [ 90.502455][ T5514] bridge_slave_0: entered promiscuous mode [ 90.510762][ T5514] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.518231][ T5514] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.526169][ T5514] bridge_slave_1: entered allmulticast mode [ 90.533758][ T5514] bridge_slave_1: entered promiscuous mode [ 90.562930][ T5514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.590236][ T5514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.658066][ T51] bridge_slave_1: left allmulticast mode [ 90.664374][ T51] bridge_slave_1: left promiscuous mode [ 90.670314][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.697869][ T51] bridge_slave_0: left allmulticast mode [ 90.704672][ T51] bridge_slave_0: left promiscuous mode [ 90.711135][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.772416][ T5547] loop2: detected capacity change from 0 to 764 [ 90.830222][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.841327][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.851812][ T51] bond0 (unregistering): Released all slaves [ 90.861180][ T5514] team0: Port device team_slave_0 added [ 90.868565][ T5514] team0: Port device team_slave_1 added [ 90.910804][ T5553] netlink: 176 bytes leftover after parsing attributes in process `syz.4.538'. [ 90.922615][ T5553] loop4: detected capacity change from 0 to 164 [ 90.937332][ T5553] syz.4.538: attempt to access beyond end of device [ 90.937332][ T5553] loop4: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 90.953952][ T5553] syz.4.538: attempt to access beyond end of device [ 90.953952][ T5553] loop4: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 90.968725][ T5514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.968971][ T5553] netlink: 'syz.4.538': attribute type 4 has an invalid length. [ 90.975734][ T5514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.010017][ T5514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.021751][ T5558] netlink: 'syz.4.538': attribute type 4 has an invalid length. [ 91.032965][ T51] hsr_slave_0: left promiscuous mode [ 91.039438][ T51] hsr_slave_1: left promiscuous mode [ 91.049168][ T51] veth1_macvtap: left promiscuous mode [ 91.054848][ T51] veth0_macvtap: left promiscuous mode [ 91.060959][ T51] veth1_vlan: left promiscuous mode [ 91.066253][ T51] veth0_vlan: left promiscuous mode [ 91.145519][ T51] team0 (unregistering): Port device team_slave_1 removed [ 91.155429][ T51] team0 (unregistering): Port device team_slave_0 removed [ 91.192349][ T5514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.199500][ T5514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.226179][ T5514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.243001][ T2953] lo speed is unknown, defaulting to 1000 [ 91.249284][ T2953] syz0: Port: 1 Link ACTIVE [ 91.305057][ T5514] hsr_slave_0: entered promiscuous mode [ 91.314863][ T5514] hsr_slave_1: entered promiscuous mode [ 91.322214][ T5514] debugfs: 'hsr0' already exists in 'hsr' [ 91.328117][ T5514] Cannot create hsr debugfs directory [ 91.353923][ T5572] lo speed is unknown, defaulting to 1000 [ 91.480505][ T5514] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 91.490226][ T5514] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 91.500304][ T5514] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 91.511683][ T5514] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 91.621956][ T5607] loop2: detected capacity change from 0 to 164 [ 91.639152][ T5607] rock: corrupted directory entry. extent=32, offset=0, size=65773 [ 91.647712][ T5607] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 91.705240][ T5514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.758983][ T5514] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.771441][ T1699] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.778676][ T1699] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.804364][ T1699] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.811712][ T1699] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.888663][ T5622] loop2: detected capacity change from 0 to 128 [ 91.923541][ T5622] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 91.937340][ T5622] ext4 filesystem being mounted at /137/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 91.947642][ T5514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.058454][ T3307] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 92.191058][ T5661] netlink: 'syz.2.547': attribute type 4 has an invalid length. [ 92.203195][ T5514] veth0_vlan: entered promiscuous mode [ 92.214641][ T5514] veth1_vlan: entered promiscuous mode [ 92.237003][ T5514] veth0_macvtap: entered promiscuous mode [ 92.245398][ T5514] veth1_macvtap: entered promiscuous mode [ 92.257006][ T5664] netlink: 28 bytes leftover after parsing attributes in process `syz.2.548'. [ 92.260374][ T5514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.280173][ T5514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.291136][ T1699] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.305363][ T1699] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.342391][ T1699] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.358633][ T37] hid-generic 0000:0000:0000.0026: unknown main item tag 0x0 [ 92.380213][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.390064][ T37] hid-generic 0000:0000:0000.0026: hidraw0: HID v0.00 Device [syz1] on syz0 [ 92.463799][ T5672] lo speed is unknown, defaulting to 1000 [ 92.487177][ T5670] loop2: detected capacity change from 0 to 764 [ 92.678064][ T5475] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.691425][ T1699] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.744981][ T1699] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.760428][ T5686] lo speed is unknown, defaulting to 1000 [ 92.817106][ T5689] lo speed is unknown, defaulting to 1000 [ 92.831989][ T1699] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.885055][ T1699] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.930969][ T5690] lo speed is unknown, defaulting to 1000 [ 93.016673][ T5690] chnl_net:caif_netlink_parms(): no params data found [ 93.030763][ T5707] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.062145][ T1699] bridge_slave_1: left allmulticast mode [ 93.068402][ T1699] bridge_slave_1: left promiscuous mode [ 93.075170][ T1699] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.094017][ T1699] bridge_slave_0: left allmulticast mode [ 93.100010][ T1699] bridge_slave_0: left promiscuous mode [ 93.105938][ T1699] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.224232][ T1699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.243469][ T1699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.263792][ T1699] bond0 (unregistering): Released all slaves [ 93.276900][ T23] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 93.285555][ T23] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz1] on syz0 [ 93.285609][ T5707] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.346878][ T1699] hsr_slave_0: left promiscuous mode [ 93.360643][ T1699] hsr_slave_1: left promiscuous mode [ 93.370465][ T1699] veth1_macvtap: left promiscuous mode [ 93.376080][ T1699] veth0_macvtap: left promiscuous mode [ 93.383295][ T1699] veth1_vlan: left promiscuous mode [ 93.389172][ T1699] veth0_vlan: left promiscuous mode [ 93.468203][ T1699] team0 (unregistering): Port device team_slave_1 removed [ 93.482792][ T1699] team0 (unregistering): Port device team_slave_0 removed [ 93.559952][ T5707] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.576989][ T5712] siw: device registration error -23 [ 93.618550][ T5690] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.625718][ T5690] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.657728][ T5690] bridge_slave_0: entered allmulticast mode [ 93.665560][ T5690] bridge_slave_0: entered promiscuous mode [ 93.706110][ T5707] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.728549][ T5690] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.735986][ T5690] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.758306][ T5500] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.778042][ T5690] bridge_slave_1: entered allmulticast mode [ 93.785604][ T5690] bridge_slave_1: entered promiscuous mode [ 93.836103][ T5690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.877442][ T5690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.887953][ T108] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.917061][ T5741] FAULT_INJECTION: forcing a failure. [ 93.917061][ T5741] name failslab, interval 1, probability 0, space 0, times 0 [ 93.930648][ T5741] CPU: 0 UID: 0 PID: 5741 Comm: syz.8.568 Not tainted syzkaller #0 PREEMPT(voluntary) [ 93.930727][ T5741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 93.930744][ T5741] Call Trace: [ 93.930754][ T5741] [ 93.930764][ T5741] __dump_stack+0x1d/0x30 [ 93.930793][ T5741] dump_stack_lvl+0xe8/0x140 [ 93.930860][ T5741] dump_stack+0x15/0x1b [ 93.930881][ T5741] should_fail_ex+0x265/0x280 [ 93.930905][ T5741] ? f_setown+0x9a/0x170 [ 93.930987][ T5741] should_failslab+0x8c/0xb0 [ 93.931020][ T5741] __kmalloc_cache_noprof+0x4c/0x320 [ 93.931063][ T5741] f_setown+0x9a/0x170 [ 93.931100][ T5741] sock_ioctl+0x451/0x610 [ 93.931207][ T5741] ? __pfx_sock_ioctl+0x10/0x10 [ 93.931267][ T5741] __se_sys_ioctl+0xce/0x140 [ 93.931287][ T5741] __x64_sys_ioctl+0x43/0x50 [ 93.931339][ T5741] x64_sys_call+0x1816/0x2ff0 [ 93.931366][ T5741] do_syscall_64+0xd2/0x200 [ 93.931477][ T5741] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 93.931510][ T5741] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 93.931542][ T5741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.931565][ T5741] RIP: 0033:0x7f8b34faeec9 [ 93.931645][ T5741] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 93.931669][ T5741] RSP: 002b:00007f8b33a0f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 93.931692][ T5741] RAX: ffffffffffffffda RBX: 00007f8b35205fa0 RCX: 00007f8b34faeec9 [ 93.931704][ T5741] RDX: 0000200000000340 RSI: 0000000000008901 RDI: 0000000000000003 [ 93.931789][ T5741] RBP: 00007f8b33a0f090 R08: 0000000000000000 R09: 0000000000000000 [ 93.931805][ T5741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.931820][ T5741] R13: 00007f8b35206038 R14: 00007f8b35205fa0 R15: 00007ffd85ab02f8 [ 93.931840][ T5741] [ 94.138242][ T108] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.170804][ T5690] team0: Port device team_slave_0 added [ 94.181763][ T5690] team0: Port device team_slave_1 added [ 94.227956][ T108] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.244635][ T1699] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.267968][ T29] kauditd_printk_skb: 296 callbacks suppressed [ 94.267986][ T29] audit: type=1326 audit(1759092345.627:5237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5749 comm="syz.4.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2815e6eec9 code=0x7ffc0000 [ 94.298181][ T29] audit: type=1326 audit(1759092345.627:5238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5749 comm="syz.4.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2815e6eec9 code=0x7ffc0000 [ 94.332874][ T5750] capability: warning: `+}[@' uses 32-bit capabilities (legacy support in use) [ 94.352545][ T108] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.368478][ T1699] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.370206][ T29] audit: type=1326 audit(1759092345.677:5239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5749 comm="syz.4.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2815e6eec9 code=0x7ffc0000 [ 94.402393][ T29] audit: type=1326 audit(1759092345.677:5240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5749 comm="syz.4.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2815e6eec9 code=0x7ffc0000 [ 94.426892][ T29] audit: type=1326 audit(1759092345.677:5241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5749 comm="syz.4.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2815e6eec9 code=0x7ffc0000 [ 94.450710][ T29] audit: type=1326 audit(1759092345.677:5242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5749 comm="syz.4.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2815e6eec9 code=0x7ffc0000 [ 94.477124][ T29] audit: type=1326 audit(1759092345.677:5243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5749 comm="syz.4.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2815e6eec9 code=0x7ffc0000 [ 94.490758][ T5747] loop2: detected capacity change from 0 to 764 [ 94.503600][ T29] audit: type=1326 audit(1759092345.677:5244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5749 comm="syz.4.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2815e6eec9 code=0x7ffc0000 [ 94.503668][ T29] audit: type=1326 audit(1759092345.677:5245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5749 comm="syz.4.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f2815e6eec9 code=0x7ffc0000 [ 94.503704][ T29] audit: type=1326 audit(1759092345.677:5246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5749 comm="syz.4.570" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2815e6eec9 code=0x7ffc0000 [ 94.589838][ T5690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.597047][ T5690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.624754][ T5690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.665723][ T1699] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.703439][ T5760] lo speed is unknown, defaulting to 1000 [ 94.704873][ T5690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.717402][ T5690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.717484][ T5690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.821470][ T5690] hsr_slave_0: entered promiscuous mode [ 94.828093][ T5690] hsr_slave_1: entered promiscuous mode [ 94.839729][ T1699] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.915273][ T5766] lo speed is unknown, defaulting to 1000 [ 94.964922][ T5748] lo speed is unknown, defaulting to 1000 [ 95.084348][ T1699] bridge_slave_1: left allmulticast mode [ 95.090368][ T1699] bridge_slave_1: left promiscuous mode [ 95.096339][ T1699] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.106973][ T1699] bridge_slave_0: left allmulticast mode [ 95.113120][ T1699] bridge_slave_0: left promiscuous mode [ 95.119391][ T1699] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.243657][ T5810] netlink: 224 bytes leftover after parsing attributes in process `syz.4.578'. [ 95.282660][ T1699] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.299293][ T1699] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.324119][ T1699] bond0 (unregistering): Released all slaves [ 95.386805][ T5821] lo speed is unknown, defaulting to 1000 [ 95.414358][ T5823] loop4: detected capacity change from 0 to 764 [ 95.473568][ T1699] hsr_slave_0: left promiscuous mode [ 95.480194][ T1699] hsr_slave_1: left promiscuous mode [ 95.486217][ T1699] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.494381][ T1699] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.503538][ T1699] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.512126][ T1699] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.527452][ T1699] veth1_macvtap: left promiscuous mode [ 95.533439][ T1699] veth0_macvtap: left promiscuous mode [ 95.539786][ T1699] veth1_vlan: left promiscuous mode [ 95.545325][ T1699] veth0_vlan: left promiscuous mode [ 95.641983][ T1699] team0 (unregistering): Port device team_slave_1 removed [ 95.652077][ T1699] team0 (unregistering): Port device team_slave_0 removed [ 95.704759][ T5690] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 95.723405][ T5690] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 95.758592][ T5690] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 95.793430][ T5748] chnl_net:caif_netlink_parms(): no params data found [ 95.814185][ T5690] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 95.845904][ T5844] loop2: detected capacity change from 0 to 2048 [ 95.883245][ T5844] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.930813][ T3307] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz-executor: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 95.950560][ T2990] ================================================================== [ 95.959069][ T2990] BUG: KCSAN: data-race in dont_mount / lookup_fast [ 95.966178][ T2990] [ 95.969143][ T2990] read-write to 0xffff8881069e6180 of 4 bytes by task 3611 on cpu 1: [ 95.977776][ T2990] dont_mount+0x2a/0x40 [ 95.982323][ T2990] vfs_unlink+0x28f/0x420 [ 95.986967][ T2990] do_unlinkat+0x24e/0x480 [ 95.991443][ T2990] __x64_sys_unlink+0x2e/0x40 [ 95.996155][ T2990] x64_sys_call+0x2dc0/0x2ff0 [ 96.000950][ T2990] do_syscall_64+0xd2/0x200 [ 96.005612][ T2990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.011535][ T2990] [ 96.014038][ T2990] read to 0xffff8881069e6180 of 4 bytes by task 2990 on cpu 0: [ 96.022208][ T2990] lookup_fast+0xf0/0x320 [ 96.026616][ T2990] walk_component+0x3f/0x220 [ 96.031340][ T2990] path_lookupat+0xfe/0x2a0 [ 96.036187][ T2990] filename_lookup+0x147/0x340 [ 96.041049][ T2990] do_readlinkat+0x7d/0x320 [ 96.045583][ T2990] __x64_sys_readlink+0x47/0x60 [ 96.050484][ T2990] x64_sys_call+0x28da/0x2ff0 [ 96.055401][ T2990] do_syscall_64+0xd2/0x200 [ 96.060025][ T2990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.066041][ T2990] [ 96.068413][ T2990] value changed: 0x00300080 -> 0x00004080 [ 96.074164][ T2990] [ 96.076605][ T2990] Reported by Kernel Concurrency Sanitizer on: [ 96.082951][ T2990] CPU: 0 UID: 0 PID: 2990 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 96.092714][ T2990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 96.103501][ T2990] ================================================================== [ 96.113133][ T5865] loop4: detected capacity change from 0 to 128 [ 96.132351][ T3307] EXT4-fs (loop2): Remounting filesystem read-only [ 96.149285][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.159995][ T5865] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 96.174277][ T5865] ext4 filesystem being mounted at /143/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 96.237684][ T5748] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.244929][ T5748] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.254717][ T5748] bridge_slave_0: entered allmulticast mode [ 96.261618][ T5748] bridge_slave_0: entered promiscuous mode [ 96.272264][ T5690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.279650][ T5748] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.287286][ T5748] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.294793][ T5748] bridge_slave_1: entered allmulticast mode [ 96.301886][ T5748] bridge_slave_1: entered promiscuous mode [ 96.316871][ T3309] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.345416][ T5748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.357817][ T5690] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.378967][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.386288][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.400299][ T5748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.413844][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.421188][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.487057][ T5748] team0: Port device team_slave_0 added [ 96.500354][ T5748] team0: Port device team_slave_1 added [ 96.530776][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.537832][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.564219][ T5748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.582085][ T5748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.589326][ T5748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.615616][ T5748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.650875][ T5748] hsr_slave_0: entered promiscuous mode [ 96.657474][ T5748] hsr_slave_1: entered promiscuous mode [ 96.663840][ T5748] debugfs: 'hsr0' already exists in 'hsr' [ 96.669967][ T5748] Cannot create hsr debugfs directory [ 96.691292][ T5690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.904522][ T5690] veth0_vlan: entered promiscuous mode [ 96.913285][ T5690] veth1_vlan: entered promiscuous mode [ 96.930918][ T5690] veth0_macvtap: entered promiscuous mode [ 96.947675][ T5690] veth1_macvtap: entered promiscuous mode [ 96.962722][ T5690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.983416][ T5748] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 96.996193][ T5690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.004574][ T5748] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.016628][ T5748] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.027166][ T5748] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.039987][ T108] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.052615][ T108] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.068145][ T108] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.081861][ T108] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.134764][ T5748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.148803][ T5748] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.169692][ T108] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.177283][ T108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.199522][ T108] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.206901][ T108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.299299][ T5748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.402818][ T5748] veth0_vlan: entered promiscuous mode [ 97.412425][ T5748] veth1_vlan: entered promiscuous mode [ 97.433756][ T5748] veth0_macvtap: entered promiscuous mode [ 97.443038][ T5748] veth1_macvtap: entered promiscuous mode [ 97.456802][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.470482][ T5748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.484261][ T108] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.502799][ T108] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.513958][ T108] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.529532][ T108] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0